last executing test programs:

10m33.458306995s ago: executing program 3 (id=1821):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000280))

10m33.165582612s ago: executing program 3 (id=1828):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)

10m32.837767371s ago: executing program 3 (id=1833):
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockname(r0, 0x0, &(0x7f00000000c0))

10m32.586339855s ago: executing program 3 (id=1835):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

10m32.129172572s ago: executing program 3 (id=1838):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000010c0)={0x1, @pix={0x3, 0x8000, 0x32315659, 0x8, 0x10, 0x6, 0x5, 0x6, 0x1, 0x7, 0x2, 0x6}})

10m31.376595846s ago: executing program 3 (id=1846):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)

10m30.993716368s ago: executing program 32 (id=1846):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)

10m27.980584774s ago: executing program 0 (id=1875):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000240)={0x1, 0x1, {0x8a, 0xd, 0xfffffffd, 0x2000004, 0x7, 0xfe3, 0x0, 0x152, 0x1}})

10m27.918116938s ago: executing program 0 (id=1876):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x800, &(0x7f0000001640)=@in6={0x21, 0x4, 0x2, 0x18, {0xa, 0x4e21, 0x8d6, @private0}}, 0x24)

10m27.800543394s ago: executing program 0 (id=1878):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0xb50}], 0x6}}], 0x1, 0x0)

10m27.624525965s ago: executing program 0 (id=1881):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

10m27.205265409s ago: executing program 0 (id=1886):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x1b}})

10m26.484373841s ago: executing program 0 (id=1892):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x2010880, &(0x7f0000000400)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c756d61736b3d303430372c75737271756f74612c6572726f72733d72656d6f756e742d726f006e6f646973636172642c726573697a653d3078303030303030303030303031303030302c756d61736b3d3078301030303030303030303030303030322c71756f74612c67695b3d00"/199, @ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0], 0x1, 0x6240, &(0x7f0000023d00)="$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")
lchown(&(0x7f0000000240)='.\x00', 0xffffffffffffffff, 0xee01)

10m26.013358149s ago: executing program 33 (id=1892):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x2010880, &(0x7f0000000400)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c756d61736b3d303430372c75737271756f74612c6572726f72733d72656d6f756e742d726f006e6f646973636172642c726573697a653d3078303030303030303030303031303030302c756d61736b3d3078301030303030303030303030303030322c71756f74612c67695b3d00"/199, @ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0], 0x1, 0x6240, &(0x7f0000023d00)="$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")
lchown(&(0x7f0000000240)='.\x00', 0xffffffffffffffff, 0xee01)

4.80684834s ago: executing program 5 (id=9868):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x10d, 0xb, &(0x7f0000000080)=0xe, 0x4)

4.657904119s ago: executing program 5 (id=9871):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000)

4.520709177s ago: executing program 5 (id=9872):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xe26, 0x101400)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=""/92)

4.356527486s ago: executing program 5 (id=9875):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, 0x0}, 0x4000)

4.200646805s ago: executing program 5 (id=9876):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x40, 0x5, 0x10, "7e8919dd3fd273b1dd33fd5f5c924477"}, 0x0, 0x0})

2.325647485s ago: executing program 5 (id=9899):
r0 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

1.812625415s ago: executing program 4 (id=9908):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4890, 0x34b00}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0)

1.530241271s ago: executing program 4 (id=9912):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)

1.504522672s ago: executing program 1 (id=9913):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x0)

1.37587626s ago: executing program 1 (id=9914):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r0, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf275, @loopback, 0xa, 0x23}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x11, 0x5}, {0x10, 0x84, 0x1}], 0x20}}], 0x2, 0x44055)

1.375205s ago: executing program 2 (id=9915):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x65f, 0xffffffff, 0x3})

1.363385151s ago: executing program 4 (id=9916):
set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6)
mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246)

1.104519496s ago: executing program 4 (id=9917):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000300000005000008000100e000000108000304", @ANYRES32, @ANYBLOB="08000200ac"], 0x34}}, 0x0)

1.104259575s ago: executing program 1 (id=9918):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x11, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)

1.100967446s ago: executing program 2 (id=9919):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x0)

960.309714ms ago: executing program 4 (id=9920):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000980), 0x45, 0x47c, &(0x7f0000000fc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0)

779.197045ms ago: executing program 2 (id=9921):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x200)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @pix={0x9, 0x800000, 0x32315659, 0x0, 0xffffffff, 0x0, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x7}})

608.496364ms ago: executing program 2 (id=9922):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00')
pread64(r0, &(0x7f0000000600)=""/4091, 0xffb, 0x12c)

604.951055ms ago: executing program 1 (id=9923):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701feffffff00edffff027c0000040080000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

422.131826ms ago: executing program 2 (id=9924):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdcedd9467f5cd2d6c4e8b3043614238ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESDEC=0x0], 0x11, 0x31b, &(0x7f0000000240)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))

316.624632ms ago: executing program 1 (id=9925):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff})
pivot_root(0x0, 0x0)

273.326824ms ago: executing program 4 (id=9926):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f0000000140)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@data_writeback}]}, 0x1, 0x444c, &(0x7f000000cd40)="$eJzs109vHGcdB/DfjO147dhhAzkYwcESSESAjO0TggMg/kSREI4MQQgjWes/SQxrr7HXyIccQMqRQxCcOHOk554q5Q20Ut9A+wLaHtJD2lO32tlZZ8e7G7vt7jpxP5+DZ+d5npnn5/3OzD6T5uoPdg7ndw7nK3vztc17h8vzf6tVj3a3Ix2Ri56f8xlGTrK/OCs//9Vvf78csf9oea3RaDQiIsrR21LH52dPH252btvSU8c0z9vndAPyx4i40VVX01hE/OH1iCQikvyfSvPtVH5Us+9Pf/32P6M0mGr+vv7WzP+Pb//gtXtvfuPZeyuP+w5MIv5b/fr37+++/62xH7/73cHMDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfr1urK3TuLS/EkKWf7+4+W1zr7J8v5h1Lv4xuNoZcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzkbq2u3L2zuBRPkih9OBmx/2h5rbN/vJx/KPc+vvGTERTJ0Nz+zcovfrm4lOXeaCRd/T/Mmz742Vhcj4hnTx9uRmH7zmzn+OTUdXL6espHDaz+dn3tecuRpAuF/TRdWIhIjlv7c8l0Wq0d1r93r3a0tzWwMl5ZxfzTrK2QTqvpBfm3tifDz5X/IH2t62rK9ueGO+tl8Tz/mbVGY6zvuP/9I2nnX4oX5D92Afl/XpMDrePVVLz/x7O24v3UCrSZ/7/Gz77/x0eU/7Xmn1JWa6nzCdBcwzTb+61XKCrmP5G19cu/1/P/41P5T/TO/86/h/Yf9Hn+7w9twkulmP+VrK34fbYWAFn+6dn3/5WX5fd/frizXhbF/Fu/iKcizL7O8z7/J0eUf7ld57Wk6wrI2ksRs8OY+JIp5l/q6n/+/peea/1fuqD3v9Kp97/2e8jNpPX+R2/F/Kf6jjvv/T814ud/a/13DhPDrOLVVcx/Omv7Iuv/6RHln61Keqz/P2mv/4+HMevlU8z/atZWfAo8zv5m67+kO/ePTuV/9SVY/2X13xzurJdFMf+ZvuOa+b99jt//mZHnHzH9mY/oXud8WRXzz1fMb3SPy+7/0tn5z444/+8M8+QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADE1abm3LkaQLhf00XViIGMv352I62ahsrW9Ua5t/OYwYz9vn46vJ/Wpto1Jd39mrbW2vV6rV2mbERN5/I0rJYbVWX9+t7F85OddU8mC7clDf2K7UI2Iyb/9mzLbPtbFT363sR0TppO8rae1g/0Flb31r5+BHi4uLizF1UsP1ZPu4vr1Xb83e6o2YPjm2nHQUl3VfPallJvlz7ehgr1LN2mc6jqnWNivVjmNm877/xPWkfnC0t1mpb69Xa/fb8/U2NZigzvDTfJveXv3d6q+XugfM5f3lkZQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCn7MqhDYNgEAXga1PZDTpEddMFQDECjhkYA8kQMACOBWARPJoQ+A0O/33JJfdeHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3jP9fGxGvIz0jIkvP47xk72Io53dX59++mj7rUjSXDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYpXfVBIIoDMAzkyKXah8j1bKbKm0gIaTJimBl6QtYWlj6uhZ2ViLKLMi6i1po9X3NXs4czoH5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ye+4mYyqOoQYXnbPIcxXH9PT+luRXxb9/U8P2JH7+ftvvn+qOt97PKt/5l/rr3SsbjfLWeh5tmInJ9085VOXFxvI29B+7dwixFQevnNu32NKZdnX+XrdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbswIEAAAAAgCB/6xUGKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIClAAAA//8jspyf")
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

122.968043ms ago: executing program 1 (id=9927):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0)

0s ago: executing program 2 (id=9928):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x800}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040)

kernel console output (not intermixed with test programs):

3
[  740.836999][T26109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8310'.
[  741.252900][   T23] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  741.320704][T26137] loop5: detected capacity change from 0 to 2048
[  741.357857][T26137] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  741.388009][T26137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  741.452920][   T23] usb 2-1: Using ep0 maxpacket: 8
[  741.498813][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  741.526360][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  741.551802][   T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  741.598443][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  741.642515][   T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  741.673799][   T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  741.711730][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.740148][   T23] usb 2-1: config 0 descriptor??
[  741.747302][T26118] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  742.281531][T19583] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  742.292509][  T788] usb 2-1: USB disconnect, device number 46
[  742.376301][T26201] xt_CT: You must specify a L4 protocol and not use inversions on it
[  742.789344][T26223] loop4: detected capacity change from 0 to 512
[  742.838197][T26223] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  742.970715][T26232] netlink: 'syz.2.8343': attribute type 1 has an invalid length.
[  742.999857][T26237] loop5: detected capacity change from 0 to 256
[  743.385157][T26258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8350'.
[  743.499212][T26260] loop1: detected capacity change from 0 to 1024
[  743.520696][   T28] audit: type=1326 audit(1770914573.898:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26262 comm="syz.5.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  743.543186][    C0] vkms_vblank_simulate: vblank timer overrun
[  743.619665][   T28] audit: type=1326 audit(1770914573.928:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26262 comm="syz.5.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  743.642215][    C0] vkms_vblank_simulate: vblank timer overrun
[  743.654641][   T28] audit: type=1326 audit(1770914573.938:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26262 comm="syz.5.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  743.677110][    C0] vkms_vblank_simulate: vblank timer overrun
[  743.684487][   T28] audit: type=1326 audit(1770914573.938:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26262 comm="syz.5.8352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  743.939826][T26281] loop2: detected capacity change from 0 to 512
[  743.951870][T26279] loop4: detected capacity change from 0 to 512
[  743.991134][T26281] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  744.033406][T26279] FAT-fs (loop4): error, clusters badly computed (1 != 0)
[  744.060221][T26279] FAT-fs (loop4): Filesystem has been set read-only
[  744.070164][T26281] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  744.184880][T26281] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.8357: bg 0: block 248: padding at end of block bitmap is not set
[  744.250054][T26300] syz.5.8362 (26300): drop_caches: 0
[  744.275060][T26281] Quota error (device loop2): write_blk: dquota write failed
[  744.336781][T26281] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  744.382690][T26281] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.8357: Failed to acquire dquot type 1
[  744.412589][T26281] EXT4-fs (loop2): 1 truncate cleaned up
[  744.419658][T26281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  744.420787][T26308] loop4: detected capacity change from 0 to 64
[  744.545623][T26314] loop1: detected capacity change from 0 to 512
[  744.586602][T26281] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  744.612637][T26281] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  744.674590][T26281] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.8357: Failed to acquire dquot type 1
[  744.754002][T26321] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  744.867789][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  744.889140][   T11] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  744.912485][   T11] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:0: Failed to release dquot type 1
[  745.248858][T26348] loop4: detected capacity change from 0 to 512
[  745.303869][T26348] EXT4-fs: Ignoring removed oldalloc option
[  745.348953][T26348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  745.473081][T26348] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.8374: invalid indirect mapped block 4294967295 (level 0)
[  745.543135][T26348] EXT4-fs (loop4): Remounting filesystem read-only
[  745.550094][T26348] EXT4-fs (loop4): 1 orphan inode deleted
[  745.582592][T26348] EXT4-fs (loop4): 1 truncate cleaned up
[  745.594608][T26348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  745.632685][T26369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8380'.
[  745.791712][ T9889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.813808][   T28] audit: type=1326 audit(1770914576.198:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26373 comm="syz.1.8383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  746.037206][T26385] loop1: detected capacity change from 0 to 256
[  746.159079][T26385] FAT-fs (loop1): Directory bread(block 64) failed
[  746.175442][T26385] FAT-fs (loop1): Directory bread(block 65) failed
[  746.202621][T26385] FAT-fs (loop1): Directory bread(block 66) failed
[  746.226129][T26385] FAT-fs (loop1): Directory bread(block 67) failed
[  746.242699][T26385] FAT-fs (loop1): Directory bread(block 68) failed
[  746.271135][T26385] FAT-fs (loop1): Directory bread(block 69) failed
[  746.286877][T26385] FAT-fs (loop1): Directory bread(block 70) failed
[  746.309948][T26385] FAT-fs (loop1): Directory bread(block 71) failed
[  746.322495][T26385] FAT-fs (loop1): Directory bread(block 72) failed
[  746.330559][T26385] FAT-fs (loop1): Directory bread(block 73) failed
[  746.352163][T26366] loop2: detected capacity change from 0 to 32768
[  746.413897][T26398] loop4: detected capacity change from 0 to 256
[  746.441172][T26398] exfat: Deprecated parameter 'namecase'
[  746.465696][T26398] exfat: Deprecated parameter 'utf8'
[  746.478391][T26366] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  746.507954][T26366] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  746.628691][T26398] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  746.703406][T26366] XFS (loop2): Ending clean mount
[  746.742844][T26366] XFS (loop2): Quotacheck needed: Please wait.
[  746.866576][T26366] XFS (loop2): Quotacheck: Done.
[  746.882141][  T788] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  747.035328][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  747.144269][  T788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  747.154258][  T788] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  747.168664][  T788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  747.192855][  T788] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  747.201979][  T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.222599][  T788] usb 6-1: Product: syz
[  747.229071][  T788] usb 6-1: Manufacturer: syz
[  747.237808][  T788] usb 6-1: SerialNumber: syz
[  747.258017][  T788] usb 6-1: config 0 descriptor??
[  747.294493][  T788] kvaser_usb 6-1:0.0: Cannot get usb endpoint(s)
[  747.447350][T26455] loop1: detected capacity change from 0 to 1024
[  747.479309][  T788] usb 6-1: USB disconnect, device number 34
[  747.558510][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  747.565256][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  747.809549][T26478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8406'.
[  748.734495][T26523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8395'.
[  748.781354][T26523] netlink: ct family unspecified
[  748.822589][T26523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  749.202251][T26513] loop4: detected capacity change from 0 to 32768
[  749.243142][T26513] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8416 (26513)
[  749.285464][T26513] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  749.306356][T26513] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  749.324523][T26513] BTRFS info (device loop4): using free space tree
[  749.602434][T26513] BTRFS info (device loop4): enabling ssd optimizations
[  749.609491][T26513] BTRFS info (device loop4): auto enabling async discard
[  749.893265][ T9889] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  749.967695][T26589] netlink: 'syz.5.8433': attribute type 13 has an invalid length.
[  750.002453][T26589] netlink: 'syz.5.8433': attribute type 27 has an invalid length.
[  750.070710][T26588] loop2: detected capacity change from 0 to 2048
[  750.233411][T26598] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  750.592841][T26609] loop5: detected capacity change from 0 to 8
[  750.802391][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  750.802408][   T28] audit: type=1800 audit(1770914581.178:3092): pid=26609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8440" name="file1" dev="loop5" ino=5 res=0 errno=0
[  750.839383][T26575] loop1: detected capacity change from 0 to 32768
[  750.954658][T26575] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  751.016052][T26575] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  751.128362][T26575] XFS (loop1): Ending clean mount
[  751.190331][T26575] XFS (loop1): Quotacheck needed: Please wait.
[  751.200850][T26640] loop4: detected capacity change from 0 to 164
[  751.374470][T26575] XFS (loop1): Quotacheck: Done.
[  751.518602][T26659] loop5: detected capacity change from 0 to 16
[  751.531018][T26659] erofs: (device loop5): mounted with root inode @ nid 36.
[  751.681369][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  752.151444][T26689] x_tables: unsorted underflow at hook 3
[  752.176677][ T3065] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  752.256756][T26691] netlink: 'syz.5.8457': attribute type 3 has an invalid length.
[  752.369081][ T3065] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  752.382495][ T3065] usb 3-1: config 0 has no interface number 0
[  752.406300][ T3065] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  752.454689][ T3065] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  752.473810][ T3065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.498719][ T3065] usb 3-1: Product: syz
[  752.519972][ T3065] usb 3-1: Manufacturer: syz
[  752.536016][T26706] loop1: detected capacity change from 0 to 164
[  752.542428][ T3065] usb 3-1: SerialNumber: syz
[  752.553377][ T3065] usb 3-1: config 0 descriptor??
[  752.560163][T26674] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  752.570617][ T3065] usb-storage 3-1:0.20: USB Mass Storage device detected
[  752.605598][ T3065] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  752.842161][ T3065] scsi host1: usb-storage 3-1:0.20
[  752.864780][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'.
[  752.891538][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'.
[  752.913944][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'.
[  752.930493][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'.
[  752.941944][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'.
[  752.960178][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'.
[  752.973147][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'.
[  752.999330][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'.
[  753.021907][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'.
[  753.128503][ T3065] usb 3-1: USB disconnect, device number 48
[  753.715848][T26756] loop4: detected capacity change from 0 to 4096
[  753.851568][T26756] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  753.929510][T26767] netlink: 'syz.2.8475': attribute type 1 has an invalid length.
[  753.938515][T26767] netlink: 'syz.2.8475': attribute type 3 has an invalid length.
[  753.973698][T26767] __nla_validate_parse: 88 callbacks suppressed
[  753.973717][T26767] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8475'.
[  754.085732][ T9889] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22.
[  754.244717][T26773] loop5: detected capacity change from 0 to 4096
[  754.280741][T26773] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  754.342650][T26773] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  754.351622][T26773] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  754.414329][T26773] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  754.488340][T26773] ntfs: volume version 3.1.
[  754.584958][T26773] ntfs: (device loop5): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  754.618019][T26773] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  754.871933][T26805] netlink: 'syz.1.8488': attribute type 1 has an invalid length.
[  754.897310][T26805] netlink: 'syz.1.8488': attribute type 2 has an invalid length.
[  755.085387][T26818] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma?
[  755.264040][T26828] netlink: 'syz.2.8494': attribute type 1 has an invalid length.
[  755.282909][T26828] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.8494'.
[  755.395607][   T28] audit: type=1326 audit(1770914585.768:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26841 comm="syz.2.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b5f9bf79 code=0x7ffc0000
[  755.418210][    C0] vkms_vblank_simulate: vblank timer overrun
[  755.434967][   T28] audit: type=1326 audit(1770914585.768:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26841 comm="syz.2.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b5f9bf79 code=0x7ffc0000
[  755.480668][   T28] audit: type=1326 audit(1770914585.778:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26841 comm="syz.2.8498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f97b5f9bf79 code=0x7ffc0000
[  755.503155][    C0] vkms_vblank_simulate: vblank timer overrun
[  755.573281][ T3065] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  755.713261][ T5756] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  755.783313][ T3065] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  755.791581][ T3065] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  755.812832][ T3065] usb 6-1: config 8 has no interface number 0
[  755.819036][ T3065] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  755.834336][ T3065] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  755.903061][ T3065] usb 6-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[  755.912197][ T3065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.929392][ T5756] usb 5-1: not running at top speed; connect to a high speed hub
[  755.942948][ T5756] usb 5-1: config 1 has an invalid interface number: 78 but max is 0
[  755.951100][ T5756] usb 5-1: config 1 has no interface number 0
[  755.958499][ T3065] usb 6-1: Product: syz
[  755.972799][ T3065] usb 6-1: Manufacturer: syz
[  755.977535][ T3065] usb 6-1: SerialNumber: syz
[  755.983204][ T5756] usb 5-1: config 1 interface 78 has no altsetting 0
[  756.001375][ T5756] usb 5-1: string descriptor 0 read error: -22
[  756.019051][ T5756] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57
[  756.041478][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.064540][T26874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8506'.
[  756.087298][ T5756] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  756.122924][ T5756] usb 5-1: selecting invalid altsetting 0
[  756.267028][ T3065] usb 6-1: USB disconnect, device number 35
[  756.292604][ T2321] pvrusb2: control-write URB failure, status=-71
[  756.299629][ T2321] pvrusb2: Device being rendered inoperable
[  756.315413][T26885] openvswitch: netlink: Message has 4 unknown bytes.
[  756.327511][ T5756] usb 5-1: USB disconnect, device number 31
[  756.364740][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  756.399480][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  757.075632][T26934] loop1: detected capacity change from 0 to 1764
[  757.211073][T26944] loop5: detected capacity change from 0 to 2048
[  757.232237][T26944] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  757.312224][T26944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  757.594864][T26960] loop1: detected capacity change from 0 to 64
[  758.301735][T26956] loop2: detected capacity change from 0 to 32768
[  758.333005][T26956] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8524 (26956)
[  758.396303][T26956] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  758.434274][T26956] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  758.452518][T26956] BTRFS info (device loop2): using free space tree
[  758.497319][T26997] loop1: detected capacity change from 0 to 164
[  758.555842][T26966] loop5: detected capacity change from 0 to 40427
[  758.576667][T26997] Unable to read rock-ridge attributes
[  758.586618][T26966] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  758.624596][T26966] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  758.647937][T26997] Unable to read rock-ridge attributes
[  758.702934][T26966] F2FS-fs (loop5): Found nat_bits in checkpoint
[  758.718751][T26956] BTRFS info (device loop2): enabling ssd optimizations
[  758.728359][T26997] syz.1.8535: attempt to access beyond end of device
[  758.728359][T26997] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  758.760784][T26956] BTRFS info (device loop2): auto enabling async discard
[  758.776500][T26997] syz.1.8535: attempt to access beyond end of device
[  758.776500][T26997] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  758.792913][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  758.792929][   T28] audit: type=1800 audit(1770914589.178:3098): pid=26997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8535" name="file0" dev="loop1" ino=1862 res=0 errno=0
[  758.946146][T26966] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  758.982655][T26966] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  759.018851][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  759.225465][T26966] fscrypt (loop5, inode 3): Error -61 getting encryption context
[  759.451433][T27038] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  759.473230][T27038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  759.874225][T27014] loop4: detected capacity change from 0 to 32768
[  760.025697][T27014] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  760.151358][T27014] (syz.4.8536,27014,0):ocfs2_find_entry:1086 ERROR: status = -117
[  760.207495][T27014] (syz.4.8536,27014,0):ocfs2_find_entry:1086 ERROR: status = -117
[  760.253990][T27014] (syz.4.8536,27014,0):ocfs2_symlink:2068 ERROR: status = -117
[  760.447754][ T9889] (syz-executor,9889,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76
[  760.572041][ T9889] ocfs2: Unmounting device (7,4) on (node local)
[  760.717568][T27037] loop1: detected capacity change from 0 to 32768
[  760.773434][T27037] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  760.962474][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  760.985044][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  761.026833][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  761.047308][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  761.065752][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  761.095321][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  761.136528][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  761.158115][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  761.181488][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  761.206928][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'.
[  761.229078][T27037] XFS (loop1): Ending clean mount
[  761.474194][ T5767] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  761.820534][T27125] netlink: 'syz.5.8562': attribute type 1 has an invalid length.
[  762.239976][T27151] vti0: entered promiscuous mode
[  762.245575][T27150] loop2: detected capacity change from 0 to 256
[  762.324328][  T970] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  762.338264][T27150] FAT-fs (loop2): Directory bread(block 64) failed
[  762.346113][T27150] FAT-fs (loop2): Directory bread(block 65) failed
[  762.356195][T27150] FAT-fs (loop2): Directory bread(block 66) failed
[  762.363194][T27150] FAT-fs (loop2): Directory bread(block 67) failed
[  762.370004][T27150] FAT-fs (loop2): Directory bread(block 68) failed
[  762.377455][T27150] FAT-fs (loop2): Directory bread(block 69) failed
[  762.384660][T27150] FAT-fs (loop2): Directory bread(block 70) failed
[  762.393028][T27150] FAT-fs (loop2): Directory bread(block 71) failed
[  762.399852][T27150] FAT-fs (loop2): Directory bread(block 72) failed
[  762.420046][T27150] FAT-fs (loop2): Directory bread(block 73) failed
[  762.584592][  T970] usb 5-1: config 0 has an invalid interface number: 3 but max is 2
[  762.606210][  T970] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  762.624443][  T970] usb 5-1: config 0 has no interface number 1
[  762.631145][  T970] usb 5-1: config 0 has no interface number 2
[  762.641298][  T970] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  762.669906][  T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.699190][  T970] usb 5-1: config 0 descriptor??
[  762.889748][T27145] loop1: detected capacity change from 0 to 32768
[  762.895570][T27170] loop5: detected capacity change from 0 to 1764
[  762.952514][T27145] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.8559 (27145)
[  762.972511][  T970] qcserial 5-1:0.3: Qualcomm USB modem converter detected
[  763.041520][T27145] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  763.109781][T27145] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  763.202692][T27145] BTRFS info (device loop1): using free space tree
[  763.267186][  T788] usb 5-1: USB disconnect, device number 32
[  763.314579][  T788] qcserial 5-1:0.3: device disconnected
[  763.464086][T27145] BTRFS info (device loop1): enabling ssd optimizations
[  763.471143][T27145] BTRFS info (device loop1): auto enabling async discard
[  763.858309][ T5767] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  764.411408][ T5781] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 10 /dev/loop1 scanned by udevd (5781)
[  764.462684][  T970] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  764.692418][  T970] usb 2-1: Using ep0 maxpacket: 32
[  764.702818][  T970] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  764.731271][  T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  764.744326][  T970] usb 2-1: config 0 has no interface number 0
[  764.779609][  T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  764.832210][  T970] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  764.882532][  T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  764.902376][  T970] usb 2-1: config 0 has no interface number 0
[  764.908613][  T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  764.929212][  T970] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  764.950370][  T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  764.959688][  T970] usb 2-1: config 0 has no interface number 0
[  764.988665][  T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  765.007904][  T970] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  765.019822][  T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  765.038748][  T970] usb 2-1: config 0 has no interface number 0
[  765.059523][  T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  765.092465][  T970] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  765.117286][  T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  765.126009][  T970] usb 2-1: config 0 has no interface number 0
[  765.132228][  T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  765.158958][  T970] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  765.181019][  T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  765.194946][  T970] usb 2-1: config 0 has no interface number 0
[  765.211551][  T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  765.242473][  T970] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  765.272888][  T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  765.285949][  T970] usb 2-1: config 0 has no interface number 0
[  765.319019][  T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  765.333131][  T970] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  765.362946][  T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  765.371609][  T970] usb 2-1: config 0 has no interface number 0
[  765.382411][  T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  765.435123][  T970] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  765.458172][  T970] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  765.472921][  T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.486980][  T970] usb 2-1: Product: syz
[  765.505929][  T970] usb 2-1: Manufacturer: syz
[  765.510619][  T970] usb 2-1: SerialNumber: syz
[  765.556542][  T970] usb 2-1: config 0 descriptor??
[  765.584081][  T970] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[  765.712874][T27299] xt_CT: You must specify a L4 protocol and not use inversions on it
[  765.813147][  T970] etas_es58x 2-1:0.2: could not parse product info: 'à …'
[  765.927080][T27304] netlink: 'syz.2.8601': attribute type 10 has an invalid length.
[  765.947354][T27304] macvlan1: entered allmulticast mode
[  766.058327][  T970] usb 2-1: USB disconnect, device number 47
[  766.079311][  T970] etas_es58x 2-1:0.2: Disconnecting syz syz
[  766.483167][T27340] loop5: detected capacity change from 0 to 2048
[  766.509361][T27340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  766.916340][T27365] binder: 27363:27365 ioctl c018620c 2000000001c0 returned -22
[  767.349008][T27398] loop1: detected capacity change from 0 to 64
[  767.585962][T27410] __nla_validate_parse: 75 callbacks suppressed
[  767.585980][T27410] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8625'.
[  767.691307][T27418] loop1: detected capacity change from 0 to 1024
[  767.721422][T27418] hfsplus: request for non-existent node 3 in B*Tree
[  767.734478][T27418] hfsplus: request for non-existent node 3 in B*Tree
[  767.742068][T27418] hfsplus: invalid length 28418 has been corrected to 255
[  767.753149][T27418] hfsplus: invalid length 28418 has been corrected to 255
[  767.856125][T27426] xt_policy: output policy not valid in PREROUTING and INPUT
[  768.775751][T27480] loop5: detected capacity change from 0 to 128
[  768.893277][T27480] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  769.072731][  T970] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  769.282402][  T970] usb 3-1: Using ep0 maxpacket: 32
[  769.289810][  T970] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  769.302563][  T970] usb 3-1: config 0 has no interface number 0
[  769.333160][  T970] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  769.364721][  T970] usb 3-1: config 0 interface 2 has no altsetting 0
[  769.374474][  T970] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  769.386918][  T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.444055][  T970] usb 3-1: Product: syz
[  769.448312][  T970] usb 3-1: Manufacturer: syz
[  769.456511][  T970] usb 3-1: SerialNumber: syz
[  769.493674][  T970] usb 3-1: config 0 descriptor??
[  769.709436][T27529] loop5: detected capacity change from 0 to 4096
[  769.754062][  T970] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  769.815199][T27529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  769.895352][T27545] loop1: detected capacity change from 0 to 512
[  769.912587][T27545] EXT4-fs: Ignoring removed mblk_io_submit option
[  769.954643][T10014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.967584][T27545] EXT4-fs (loop1): orphan cleanup on readonly fs
[  770.005376][T27545] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  770.042869][T27545] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.8664: attempt to clear invalid blocks 2 len 1
[  770.143403][T27545] EXT4-fs (loop1): Remounting filesystem read-only
[  770.150568][T27545] EXT4-fs (loop1): 1 truncate cleaned up
[  770.171020][T27545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  770.235172][  T970] usb 3-1: USB disconnect, device number 49
[  770.454140][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  770.742384][  T788] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  770.944928][  T788] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  770.971058][  T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.985914][  T788] usb 6-1: config 0 descriptor??
[  771.438042][  T788] ath6kl: Failed to submit usb control message: -71
[  771.458163][  T788] ath6kl: unable to send the bmi data to the device: -71
[  771.471192][  T788] ath6kl: Unable to send get target info: -71
[  771.483836][  T788] ath6kl: Failed to init ath6kl core: -71
[  771.491456][  T788] ath6kl_usb: probe of 6-1:0.0 failed with error -71
[  771.503346][  T788] usb 6-1: USB disconnect, device number 36
[  771.941242][T27675] binder: 27674:27675 ioctl 40046210 0 returned -14
[  772.000273][T27679] netlink: 'syz.2.8694': attribute type 9 has an invalid length.
[  772.034073][T27679] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.8694'.
[  772.202787][T27688] netlink: 'syz.4.8696': attribute type 9 has an invalid length.
[  772.364702][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8701'.
[  772.533057][T27699] loop1: detected capacity change from 0 to 8192
[  772.558326][T27699] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  772.896356][    T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  773.092829][    T9] usb 6-1: Using ep0 maxpacket: 32
[  773.142422][    T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  773.222562][    T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  773.240808][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  773.281863][    T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  773.302935][    T9] usb 6-1: Product: syz
[  773.311033][    T9] usb 6-1: Manufacturer: syz
[  773.351336][    T9] hub 6-1:4.0: USB hub found
[  773.587484][    T9] hub 6-1:4.0: config failed, hub has too many ports! (err -19)
[  773.741484][T27774] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8720'.
[  773.942717][    T9] usb 6-1: USB disconnect, device number 37
[  773.989998][T27763] loop1: detected capacity change from 0 to 32768
[  774.052877][T27763] ea_get: invalid extended attribute
[  774.059226][T27763] ffff88805aa80c70: 04 00 00 00                                      ....
[  774.118524][T27794] loop2: detected capacity change from 0 to 512
[  774.216083][T27794] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.8725: invalid block
[  774.336289][T27794] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.8725: Invalid block bitmap block 0 in block_group 0
[  774.371674][T27794] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem
[  774.391089][T27794] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.8725: attempt to clear invalid blocks 983261 len 1
[  774.410927][T27794] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.8725: invalid indirect mapped block 2683928664 (level 0)
[  774.436159][T27794] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.8725: Invalid inode table block 0 in block_group 0
[  774.470131][T27794] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  774.534884][T27794] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  774.562438][T27794] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.8725: Invalid inode table block 0 in block_group 0
[  774.617651][T27794] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  774.655206][T27794] EXT4-fs error (device loop2): ext4_truncate:4294: inode #13: comm syz.2.8725: mark_inode_dirty error
[  774.692501][T27794] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  774.716267][T27794] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.8725: Invalid inode table block 0 in block_group 0
[  774.778243][T27794] EXT4-fs (loop2): 1 truncate cleaned up
[  774.793836][T27794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  774.891685][T27794] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.8725: Invalid inode table block 0 in block_group 0
[  774.913089][  T970] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  774.947430][T27794] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  775.028536][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  775.037729][   T28] audit: type=1326 audit(1770914605.418:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27832 comm="syz.5.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.037995][   T28] audit: type=1326 audit(1770914605.418:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27832 comm="syz.5.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.051415][   T28] audit: type=1326 audit(1770914605.428:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27832 comm="syz.5.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.117235][   T28] audit: type=1326 audit(1770914605.498:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27832 comm="syz.5.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.159252][  T970] usb 5-1: Using ep0 maxpacket: 32
[  775.181791][  T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  775.192857][   T28] audit: type=1326 audit(1770914605.498:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27832 comm="syz.5.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.192910][   T28] audit: type=1326 audit(1770914605.498:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27832 comm="syz.5.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.192955][   T28] audit: type=1326 audit(1770914605.498:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27832 comm="syz.5.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.193000][   T28] audit: type=1326 audit(1770914605.498:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27832 comm="syz.5.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.193046][   T28] audit: type=1326 audit(1770914605.498:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27832 comm="syz.5.8734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.346312][  T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  775.372195][  T970] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  775.388445][  T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.401420][   T28] audit: type=1326 audit(1770914605.778:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27843 comm="syz.5.8738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  775.403057][  T970] usb 5-1: Product: syz
[  775.456533][  T970] usb 5-1: Manufacturer: syz
[  775.461412][  T970] usb 5-1: SerialNumber: syz
[  775.477407][  T970] usb 5-1: config 0 descriptor??
[  775.506089][  T970] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36
[  775.617866][T27855] loop2: detected capacity change from 0 to 256
[  775.787161][T27855] FAT-fs (loop2): Directory bread(block 64) failed
[  775.806279][T27855] FAT-fs (loop2): Directory bread(block 65) failed
[  775.816076][T27855] FAT-fs (loop2): Directory bread(block 66) failed
[  775.825773][  T788] usb 5-1: USB disconnect, device number 33
[  775.851457][T27855] FAT-fs (loop2): Directory bread(block 67) failed
[  775.864236][T27855] FAT-fs (loop2): Directory bread(block 68) failed
[  775.883700][T27855] FAT-fs (loop2): Directory bread(block 69) failed
[  775.915890][T27855] FAT-fs (loop2): Directory bread(block 70) failed
[  775.950461][T27855] FAT-fs (loop2): Directory bread(block 71) failed
[  775.973758][T27855] FAT-fs (loop2): Directory bread(block 72) failed
[  775.990423][T27855] FAT-fs (loop2): Directory bread(block 73) failed
[  776.237940][T27888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8745'.
[  776.774753][T27922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8754'.
[  776.789231][T27922] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8754'.
[  776.811508][T27924] loop1: detected capacity change from 0 to 64
[  776.936978][T27929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8757'.
[  776.965247][T27929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8757'.
[  777.362042][T27957] loop1: detected capacity change from 0 to 256
[  777.417589][T27957] FAT-fs (loop1): Directory bread(block 64) failed
[  777.435629][T27957] FAT-fs (loop1): Directory bread(block 65) failed
[  777.457132][T27957] FAT-fs (loop1): Directory bread(block 66) failed
[  777.464421][T27957] FAT-fs (loop1): Directory bread(block 67) failed
[  777.491595][T27957] FAT-fs (loop1): Directory bread(block 68) failed
[  777.514003][T27957] FAT-fs (loop1): Directory bread(block 69) failed
[  777.520775][T27957] FAT-fs (loop1): Directory bread(block 70) failed
[  777.557484][T27962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8767'.
[  777.576362][T27957] FAT-fs (loop1): Directory bread(block 71) failed
[  777.585232][T27962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8767'.
[  777.598073][T27957] FAT-fs (loop1): Directory bread(block 72) failed
[  777.616552][T27957] FAT-fs (loop1): Directory bread(block 73) failed
[  777.616583][T27962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8767'.
[  777.891783][T27977] netlink: 'syz.5.8771': attribute type 8 has an invalid length.
[  778.116065][T27990] binder: 27989:27990 ioctl c018620c 200000000380 returned -1
[  778.249925][T27999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8778'.
[  778.702401][ T5835] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  778.845467][T28039] loop5: detected capacity change from 0 to 8
[  778.858879][T28039] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  778.887455][T28039] cramfs: Error -3 while decompressing!
[  778.900788][T28039] cramfs: ffffffff973f8368(26)->ffff888074d74000(4096)
[  778.909221][ T5835] usb 5-1: Using ep0 maxpacket: 16
[  778.925365][ T5781] udevd[5781]: incorrect cramfs checksum on /dev/loop5
[  778.932625][ T5835] usb 5-1: config 0 has no interfaces?
[  778.939330][T28039] cramfs: Error -3 while decompressing!
[  778.957648][ T5835] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  778.970911][T28039] cramfs: ffffffff973f8382(26)->ffff888056dc2000(4096)
[  778.979359][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.989287][T28039] cramfs: Error -3 while decompressing!
[  778.996366][ T5835] usb 5-1: Product: syz
[  779.000802][T28039] cramfs: ffffffff973f839c(16)->ffff888055fc0000(4096)
[  779.009097][ T5835] usb 5-1: Manufacturer: syz
[  779.015575][T28039] cramfs: Error -3 while decompressing!
[  779.021243][ T5835] usb 5-1: SerialNumber: syz
[  779.037399][T28039] cramfs: ffffffff973f8368(26)->ffff888074d74000(4096)
[  779.046658][ T5781] udevd[5781]: incorrect cramfs checksum on /dev/loop5
[  779.046678][ T5835] r8152-cfgselector 5-1: config 0 descriptor??
[  779.139689][ T5781] udevd[5781]: incorrect cramfs checksum on /dev/loop5
[  779.288555][ T5835] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  779.342725][T28050] loop1: detected capacity change from 0 to 4096
[  779.403034][T28050] ntfs: volume version 3.1.
[  779.518974][ T5835] usb 5-1: USB disconnect, device number 34
[  779.805860][T28080] loop2: detected capacity change from 0 to 764
[  779.817166][T28082] program syz.5.8801 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  779.863371][T28080] rock: directory entry would overflow storage
[  779.869648][T28080] rock: sig=0x4654, size=5, remaining=4
[  779.921425][T19583] Bluetooth: hci2: unexpected event for opcode 0x2005
[  780.165963][T28099] netlink: 'syz.5.8806': attribute type 10 has an invalid length.
[  780.174189][T28099] __nla_validate_parse: 1 callbacks suppressed
[  780.174224][T28099] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8806'.
[  780.225750][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  780.225767][   T28] audit: type=1326 audit(1770914610.608:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  780.313643][   T28] audit: type=1326 audit(1770914610.608:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  780.370233][   T28] audit: type=1326 audit(1770914610.638:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  780.436720][   T28] audit: type=1326 audit(1770914610.638:3125): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  780.499289][T28111] xt_TCPMSS: Only works on TCP SYN packets
[  780.524059][   T28] audit: type=1326 audit(1770914610.638:3126): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.4.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  780.546879][    C0] vkms_vblank_simulate: vblank timer overrun
[  780.785392][T28123] loop1: detected capacity change from 0 to 1764
[  780.816784][T28123] iso9660: Corrupted directory entry in block 2 of inode 1920
[  781.541170][T28157] loop5: detected capacity change from 0 to 4096
[  781.639118][T28157] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  781.676775][T28157] ntfs3: loop5: Failed to initialize $Extend/$Reparse.
[  781.710116][T28157] ntfs3: loop5: ino=5, "/" directory corrupted
[  781.719170][T28168] netlink: 'syz.1.8827': attribute type 1 has an invalid length.
[  781.836771][T28173] loop2: detected capacity change from 0 to 16
[  781.871074][T28173] erofs: (device loop2): mounted with root inode @ nid 36.
[  782.562637][T28213] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.8840'.
[  782.969514][T28233] loop4: detected capacity change from 0 to 8
[  783.776635][T28272] 8021q: adding VLAN 0 to HW filter on device team0
[  783.863728][T28272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  783.928287][T28272] veth1_vlan: left allmulticast mode
[  783.979697][T28272] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  783.992212][T28272] veth3: left promiscuous mode
[  783.998543][T28272] veth3: left allmulticast mode
[  784.015254][T28289] netlink: 174 bytes leftover after parsing attributes in process `syz.2.8865'.
[  784.031084][T28272] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  784.150275][ T5756] xfrm0 speed is unknown, defaulting to 1000
[  784.418886][T28301] loop4: detected capacity change from 0 to 4096
[  784.863327][T28331] loop4: detected capacity change from 0 to 22
[  784.886414][T28331] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  784.904062][T28332] netlink: 'syz.1.8878': attribute type 6 has an invalid length.
[  784.942415][T28331] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  786.026214][T28382] loop4: detected capacity change from 0 to 4096
[  786.094563][T28389] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  786.153023][T28344] loop5: detected capacity change from 0 to 32768
[  786.211204][T28344] ERROR: (device loop5): diAllocAG: numfree > numinos
[  786.211204][T28344] 
[  786.249038][T28382] NILFS (loop4): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed
[  786.281073][T28344] ialloc: diAlloc returned -5!
[  786.622080][T28372] loop2: detected capacity change from 0 to 32768
[  786.756678][T28372] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt
[  786.756678][T28372] 
[  786.773143][T28372] ERROR: (device loop2): remounting filesystem as read-only
[  786.795211][T28372] jfs_lookup: dtSearch returned -5
[  787.074380][T28418] loop2: detected capacity change from 0 to 256
[  787.242783][T28429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8904'.
[  787.396513][T28437] libceph: resolve '0' (ret=-3): failed
[  787.514693][T28446] loop1: detected capacity change from 0 to 64
[  787.540996][T28446] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  787.576328][T28446] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  787.742840][ T5756] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  787.938319][ T5756] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  787.954288][ T5756] usb 5-1: config 1 has no interface number 0
[  787.967377][ T5756] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  787.978338][ T5756] usb 5-1: config 1 interface 105 has no altsetting 0
[  787.993619][ T5756] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  788.003139][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.003166][ T5756] usb 5-1: Product: syz
[  788.003191][ T5756] usb 5-1: Manufacturer: syz
[  788.003207][ T5756] usb 5-1: SerialNumber: syz
[  788.265643][ T5756] aqc111: probe of 5-1:1.105 failed with error -22
[  788.494798][T28501] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  788.520351][ T5835] usb 5-1: USB disconnect, device number 35
[  788.722701][ T5756] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  788.745391][   T28] audit: type=1326 audit(1770914619.128:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28548 comm="syz.5.8928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  788.796893][   T28] audit: type=1326 audit(1770914619.148:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28548 comm="syz.5.8928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  788.820458][   T28] audit: type=1326 audit(1770914619.158:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28548 comm="syz.5.8928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  788.843843][   T28] audit: type=1326 audit(1770914619.158:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28548 comm="syz.5.8928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  788.902456][   T28] audit: type=1326 audit(1770914619.158:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28548 comm="syz.5.8928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  788.954492][ T5756] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  788.973124][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.980915][T28555] loop1: detected capacity change from 0 to 1764
[  788.992937][ T5756] usb 3-1: config 0 descriptor??
[  789.040469][ T5756] cp210x 3-1:0.0: cp210x converter detected
[  789.257333][ T5756] usb 3-1: cp210x converter now attached to ttyUSB0
[  789.322796][T28577] : renamed from veth0_to_bond (while UP)
[  789.445774][T28582] loop4: detected capacity change from 0 to 1764
[  789.492760][ T5756] usb 3-1: USB disconnect, device number 50
[  789.520445][ T5756] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  789.557863][T28582] iso9660: Corrupted directory entry in block 2 of inode 1920
[  789.566413][ T5756] cp210x 3-1:0.0: device disconnected
[  789.966888][T28620] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  790.577305][T28656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8955'.
[  791.194267][T28683] loop2: detected capacity change from 0 to 8
[  791.201567][T28683] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  791.263306][ T5781] udevd[5781]: incorrect cramfs checksum on /dev/loop2
[  791.277451][T28683] cramfs: Error -3 while decompressing!
[  791.289130][T28683] cramfs: ffffffff973f4368(26)->ffff888075450000(4096)
[  791.309739][T28683] cramfs: Error -3 while decompressing!
[  791.335105][T22684] udevd[22684]: incorrect cramfs checksum on /dev/loop2
[  791.343133][T28683] cramfs: ffffffff973f4382(26)->ffff88806ca7e000(4096)
[  791.368446][T28683] cramfs: Error -3 while decompressing!
[  791.383660][T28683] cramfs: ffffffff973f439c(16)->ffff88806ca7d000(4096)
[  791.410682][T28683] cramfs: Error -3 while decompressing!
[  791.436915][T28683] cramfs: ffffffff973f4368(26)->ffff888075450000(4096)
[  791.662156][T28705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8970'.
[  791.784054][T28714] vlan0: entered promiscuous mode
[  792.508261][T28753] loop2: detected capacity change from 0 to 512
[  792.571185][T28753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002]
[  792.580594][T28753] System zones: 1-12
[  792.595686][T28753] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.8986: invalid indirect mapped block 8 (level 2)
[  792.663068][T28753] EXT4-fs (loop2): Remounting filesystem read-only
[  792.692540][T28753] EXT4-fs (loop2): 1 truncate cleaned up
[  792.699668][T28753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  792.834176][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.340671][T28742] loop5: detected capacity change from 0 to 32768
[  793.408786][T28742] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  793.729252][T28742] XFS (loop5): Starting recovery (logdev: internal)
[  793.827384][T28742] XFS (loop5): Ending recovery (logdev: internal)
[  794.060519][   T28] audit: type=1326 audit(1770914624.438:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28824 comm="syz.1.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  794.125273][T10014] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  794.168693][   T28] audit: type=1326 audit(1770914624.438:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28824 comm="syz.1.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  794.309504][   T28] audit: type=1326 audit(1770914624.458:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28824 comm="syz.1.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  794.337209][   T28] audit: type=1326 audit(1770914624.458:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28824 comm="syz.1.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  794.414967][   T28] audit: type=1326 audit(1770914624.458:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28824 comm="syz.1.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  794.469789][   T28] audit: type=1326 audit(1770914624.458:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28824 comm="syz.1.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  794.582361][   T28] audit: type=1326 audit(1770914624.458:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28824 comm="syz.1.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  794.640914][T28803] loop2: detected capacity change from 0 to 32768
[  794.649266][   T28] audit: type=1326 audit(1770914624.458:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28824 comm="syz.1.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  794.754741][   T28] audit: type=1326 audit(1770914624.458:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28824 comm="syz.1.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efc5699bf79 code=0x7ffc0000
[  795.372493][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  795.462947][ T5835] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  795.494812][T28883] loop5: detected capacity change from 0 to 4096
[  795.508648][T28883] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  795.572471][    T9] usb 5-1: Using ep0 maxpacket: 8
[  795.591527][    T9] usb 5-1: config 1 has an invalid interface number: 128 but max is 1
[  795.604092][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  795.617597][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  795.627643][T28883] ntfs3: loop5: Failed to initialize $Extend/$Reparse.
[  795.634698][    T9] usb 5-1: config 1 has no interface number 0
[  795.640910][    T9] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  795.652760][ T5835] usb 3-1: Using ep0 maxpacket: 8
[  795.670504][ T5835] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  795.691231][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  795.700396][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.700433][ T5835] usb 3-1: Product: syz
[  795.700450][ T5835] usb 3-1: Manufacturer: syz
[  795.700465][ T5835] usb 3-1: SerialNumber: syz
[  795.724156][ T5835] usb 3-1: config 0 descriptor??
[  795.756143][ T5835] gspca_main: sq930x-2.14.0 probing 2770:930c
[  795.770104][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.822912][    T9] usb 5-1: Product: syz
[  795.827154][    T9] usb 5-1: Manufacturer: syz
[  795.831797][    T9] usb 5-1: SerialNumber: syz
[  795.849383][T10014] ntfs3: loop5: ino=1a, ntfs_sync_fs failed, -22.
[  795.867788][    T9] cdc_wdm 5-1:1.128: skipping garbage
[  795.879409][    T9] cdc_wdm 5-1:1.128: invalid descriptor buffer length
[  795.894618][    T9] cdc_wdm: probe of 5-1:1.128 failed with error -22
[  796.100941][    T9] usb 5-1: USB disconnect, device number 36
[  796.169012][ T5835] gspca_sq930x: ucbus_write failed -71
[  796.383360][T28927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  796.422436][ T5835] gspca_sq930x: Sensor ov9630 not yet treated
[  796.438477][ T5835] sq930x: probe of 3-1:0.0 failed with error -22
[  796.480816][ T5835] usb 3-1: USB disconnect, device number 51
[  796.815121][T28941] netlink: 'syz.1.9031': attribute type 33 has an invalid length.
[  796.838415][T28922] loop5: detected capacity change from 0 to 32768
[  796.915408][T28922] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  797.194824][    T9] XFS (loop5): Metadata corruption detected at xfs_agf_verify+0x211/0x9b0, xfs_agf block 0x1 
[  797.214006][    T9] XFS (loop5): Unmount and run xfs_repair
[  797.219898][    T9] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  797.235013][T28971] netlink: 'syz.4.9038': attribute type 21 has an invalid length.
[  797.243503][    T9] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00  XAGF.......... .
[  797.272555][    T9] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01  ................
[  797.281505][    T9] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06  ................
[  797.305553][    T9] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00  ................
[  797.332136][    T9] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  797.361626][    T9] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01  ................
[  797.397662][    T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  797.429311][    T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  797.464778][T28922] XFS (loop5): metadata I/O error in "xfs_read_agf+0x294/0x590" at daddr 0x1 len 1 error 117
[  797.492698][T28922] XFS (loop5): Error -117 reserving per-AG metadata reserve pool.
[  797.530397][T28982] loop4: detected capacity change from 0 to 764
[  797.535399][T28922] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592).  Shutting down filesystem.
[  797.656278][T28982] Symlink component flag not implemented
[  797.661994][T28982] Symlink component flag not implemented
[  797.675852][T28922] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  797.712748][T28982] Symlink component flag not implemented (129)
[  797.714166][T28922] XFS (loop5): Ending clean mount
[  797.718967][T28982] Symlink component flag not implemented (6)
[  798.012598][T10014] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  798.422808][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  798.652479][    T9] usb 5-1: Using ep0 maxpacket: 32
[  798.670938][    T9] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  798.695558][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.711274][    T9] usb 5-1: config 0 descriptor??
[  798.720757][    T9] gspca_main: sq930x-2.14.0 probing 041e:403c
[  798.793935][T29045] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9059'.
[  799.009294][T29058] netlink: 'syz.1.9063': attribute type 4 has an invalid length.
[  799.157327][    T9] gspca_sq930x: ucbus_write failed -71
[  799.175573][    T9] sq930x: probe of 5-1:0.0 failed with error -71
[  799.198495][T29068] MTD: Couldn't look up '/dev/sg0': -15
[  799.217300][    T9] usb 5-1: USB disconnect, device number 37
[  799.400573][T29080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9068'.
[  799.634329][T29093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9071'.
[  799.651513][T29093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9071'.
[  799.727412][T29098] netlink: 'syz.1.9074': attribute type 5 has an invalid length.
[  800.052427][   T23] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  800.211966][T29122] netlink: 'syz.1.9081': attribute type 11 has an invalid length.
[  800.263937][   T23] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  800.304481][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.338000][   T23] usb 3-1: config 0 descriptor??
[  800.373770][   T23] cp210x 3-1:0.0: cp210x converter detected
[  800.538218][T29095] loop5: detected capacity change from 0 to 32768
[  800.593181][   T23] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121
[  800.601116][   T23] cp210x 3-1:0.0: querying part number failed
[  800.635908][   T23] usb 3-1: cp210x converter now attached to ttyUSB0
[  800.742971][ T1084] read_mapping_page failed!
[  800.747580][ T1084] ERROR: (device loop5): txCommit: 
[  800.747580][ T1084] 
[  800.806200][ T1084] jfs_write_inode: jfs_commit_inode failed!
[  800.820027][ T5835] usb 3-1: USB disconnect, device number 52
[  800.835384][ T5835] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  800.868500][ T5835] cp210x 3-1:0.0: device disconnected
[  801.168196][T29170] loop4: detected capacity change from 0 to 512
[  801.206652][T29170] EXT4-fs: Ignoring removed nobh option
[  801.276551][T29170] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #3: comm syz.4.9090: corrupted inode contents
[  801.312774][T29170] EXT4-fs (loop4): Remounting filesystem read-only
[  801.341375][T29170] Quota error (device loop4): write_blk: dquota write failed
[  801.349073][T29170] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota
[  801.361201][T29170] EXT4-fs (loop4): 1 truncate cleaned up
[  801.368752][T29170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  801.381648][T29170] ext4 filesystem being mounted at /1755/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  801.566191][ T9889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.091915][T29210] loop4: detected capacity change from 0 to 4096
[  802.141340][T29210] ntfs: volume version 3.1.
[  802.243473][T19583] Bluetooth: hci2: unexpected event for opcode 0x0411
[  802.466181][T29241] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  802.512797][  T788] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  802.518237][T29243] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9110'.
[  802.656860][   T28] audit: type=1326 audit(1770914633.038:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.4.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  802.702563][   T28] audit: type=1326 audit(1770914633.058:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.4.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  802.758779][  T788] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  802.783257][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.791346][  T788] usb 3-1: Product: syz
[  802.802194][   T28] audit: type=1326 audit(1770914633.068:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.4.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  802.830112][  T788] usb 3-1: Manufacturer: syz
[  802.840657][  T788] usb 3-1: SerialNumber: syz
[  802.869512][  T788] usb 3-1: config 0 descriptor??
[  802.875671][   T28] audit: type=1326 audit(1770914633.068:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.4.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  802.906938][   T28] audit: type=1326 audit(1770914633.068:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29248 comm="syz.4.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  802.917940][  T788] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  803.057014][T29259] loop5: detected capacity change from 0 to 4096
[  803.065217][T29259] EXT4-fs: Ignoring removed mblk_io_submit option
[  803.100387][T29259] EXT4-fs (loop5): Test dummy encryption mode enabled
[  803.144656][T29259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  803.243853][T10014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.340735][  T788] gspca_sunplus: reg_w_riv err -71
[  803.364850][  T788] sunplus: probe of 3-1:0.0 failed with error -71
[  803.393821][  T788] usb 3-1: USB disconnect, device number 53
[  803.730220][T29297] dvmrp0: entered allmulticast mode
[  803.739933][T29305] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.9125'.
[  804.453791][T29345] openvswitch: netlink: Actions may not be safe on all matching packets
[  804.508281][T29349] loop1: detected capacity change from 0 to 1764
[  804.980641][T29378] loop1: detected capacity change from 0 to 128
[  805.077591][T29386] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9150'.
[  805.093432][T29378] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  805.150531][T29378] ext4 filesystem being mounted at /2305/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  805.257084][T29395] netlink: 'syz.4.9153': attribute type 3 has an invalid length.
[  805.288535][T29395] netlink: 'syz.4.9153': attribute type 1 has an invalid length.
[  805.304525][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  805.314348][ T5835] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  805.322813][T29395] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9153'.
[  805.525192][ T5835] usb 3-1: config index 0 descriptor too short (expected 133, got 72)
[  805.544638][ T5835] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  805.554198][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.592484][ T5835] usb 3-1: Product: syz
[  805.596837][ T5835] usb 3-1: Manufacturer: syz
[  805.601480][ T5835] usb 3-1: SerialNumber: syz
[  805.641271][ T5835] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  805.678297][   T23] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  806.000912][    C1] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM
[  806.170990][T29441] loop4: detected capacity change from 0 to 256
[  806.216349][    T9] usb 3-1: USB disconnect, device number 54
[  806.271554][T29441] FAT-fs (loop4): Directory bread(block 64) failed
[  806.287851][T29441] FAT-fs (loop4): Directory bread(block 65) failed
[  806.297423][T29441] FAT-fs (loop4): Directory bread(block 66) failed
[  806.313597][T29441] FAT-fs (loop4): Directory bread(block 67) failed
[  806.320317][T29441] FAT-fs (loop4): Directory bread(block 68) failed
[  806.330848][T29441] FAT-fs (loop4): Directory bread(block 69) failed
[  806.340051][T29441] FAT-fs (loop4): Directory bread(block 70) failed
[  806.351438][T29441] FAT-fs (loop4): Directory bread(block 71) failed
[  806.361750][T29441] FAT-fs (loop4): Directory bread(block 72) failed
[  806.374572][T29441] FAT-fs (loop4): Directory bread(block 73) failed
[  806.482801][  T788] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  806.579135][T29462] loop1: detected capacity change from 0 to 256
[  806.645440][T29462] FAT-fs (loop1): Directory bread(block 64) failed
[  806.652026][T29462] FAT-fs (loop1): Directory bread(block 65) failed
[  806.662611][T29462] FAT-fs (loop1): Directory bread(block 66) failed
[  806.670456][T29462] FAT-fs (loop1): Directory bread(block 67) failed
[  806.682192][T29462] FAT-fs (loop1): Directory bread(block 68) failed
[  806.691936][T29462] FAT-fs (loop1): Directory bread(block 69) failed
[  806.702759][  T788] usb 6-1: Using ep0 maxpacket: 16
[  806.705871][T29462] FAT-fs (loop1): Directory bread(block 70) failed
[  806.716533][  T788] usb 6-1: config 0 has no interfaces?
[  806.720527][T29462] FAT-fs (loop1): Directory bread(block 71) failed
[  806.732082][T29462] FAT-fs (loop1): Directory bread(block 72) failed
[  806.755193][  T788] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  806.757482][T29462] FAT-fs (loop1): Directory bread(block 73) failed
[  806.776301][  T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.776780][   T23] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  806.800522][  T788] usb 6-1: Product: syz
[  806.805394][  T788] usb 6-1: Manufacturer: syz
[  806.810049][  T788] usb 6-1: SerialNumber: syz
[  806.813329][   T23] ath9k_htc: Failed to initialize the device
[  806.823697][    T9] usb 3-1: ath9k_htc: USB layer deinitialized
[  806.846739][  T788] r8152-cfgselector 6-1: config 0 descriptor??
[  807.092702][  T788] usbip-host 6-1: 6-1 is not in match_busid table... skip!
[  807.223110][T29487] loop4: detected capacity change from 0 to 256
[  807.305594][  T788] usb 6-1: USB disconnect, device number 38
[  807.846729][T29521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9184'.
[  808.230643][T29539] loop1: detected capacity change from 0 to 128
[  808.268248][T29539] FAT-fs (loop1): Directory bread(block 162) failed
[  808.296679][T29539] FAT-fs (loop1): Directory bread(block 163) failed
[  808.312055][T29539] FAT-fs (loop1): Directory bread(block 164) failed
[  808.332562][T29539] FAT-fs (loop1): Directory bread(block 165) failed
[  808.339307][T29539] FAT-fs (loop1): Directory bread(block 166) failed
[  808.346862][T29539] FAT-fs (loop1): Directory bread(block 167) failed
[  808.357077][T29545] misc userio: No port type given on /dev/userio
[  808.375279][T29539] FAT-fs (loop1): Directory bread(block 168) failed
[  808.386509][T29539] FAT-fs (loop1): Directory bread(block 169) failed
[  808.410437][T29539] FAT-fs (loop1): Directory bread(block 162) failed
[  808.418632][T29539] FAT-fs (loop1): Directory bread(block 163) failed
[  808.429285][T29539] syz.1.9190: attempt to access beyond end of device
[  808.429285][T29539] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[  808.466648][T29539] syz.1.9190: attempt to access beyond end of device
[  808.466648][T29539] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[  808.560552][T29550] loop5: detected capacity change from 0 to 64
[  808.585694][T29513] loop4: detected capacity change from 0 to 32768
[  808.674327][T29513] JBD2: Ignoring recovery information on journal
[  808.746602][T29513] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  809.009329][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  809.016546][ T9889] ocfs2: Unmounting device (7,4) on (node local)
[  809.025217][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  809.638978][T29602] loop4: detected capacity change from 0 to 4096
[  809.659737][T29602] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  809.683533][T29602] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  809.723327][T29602] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  809.745484][T29602] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  809.772427][  T788] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  809.800393][T29602] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  809.843667][T29602] ntfs: volume version 3.1.
[  809.856394][T29602] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  809.893142][T29602] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  809.947876][T29602] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  809.975920][T29602] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  809.992560][  T788] usb 2-1: Using ep0 maxpacket: 32
[  810.010449][  T788] usb 2-1: unable to get BOS descriptor or descriptor too short
[  810.018340][T29602] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  810.048573][  T788] usb 2-1: config 129 has an invalid interface number: 249 but max is 0
[  810.063188][  T788] usb 2-1: config 129 has no interface number 0
[  810.083949][  T788] usb 2-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32
[  810.111391][  T788] usb 2-1: config 129 interface 249 altsetting 247 endpoint 0xA has invalid wMaxPacketSize 0
[  810.154778][  T788] usb 2-1: config 129 interface 249 has no altsetting 0
[  810.179779][  T788] usb 2-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38
[  810.192613][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.221053][  T788] usb 2-1: Product: syz
[  810.231405][  T788] usb 2-1: Manufacturer: syz
[  810.241589][  T788] usb 2-1: SerialNumber: syz
[  810.271701][T29596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  810.514691][T29596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.539788][T29596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  810.609560][  T788] smsc95xx v2.0.0
[  810.639099][  T788] smsc95xx 2-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  810.660481][T29649] sctp: [Deprecated]: syz.4.9218 (pid 29649) Use of struct sctp_assoc_value in delayed_ack socket option.
[  810.660481][T29649] Use struct sctp_sack_info instead
[  810.677818][  T788] smsc95xx: probe of 2-1:129.249 failed with error -71
[  810.691605][  T788] usb 2-1: USB disconnect, device number 48
[  811.315087][T29641] loop2: detected capacity change from 0 to 32768
[  811.813024][T29697] netlink: 'syz.4.9232': attribute type 2 has an invalid length.
[  811.948412][T29698] loop5: detected capacity change from 0 to 4096
[  812.076932][T29698] ntfs: volume version 3.1.
[  812.755820][T29743] loop4: detected capacity change from 0 to 512
[  812.818447][T29743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  812.862657][T29743] ext4 filesystem being mounted at /1794/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  812.910810][T29704] loop1: detected capacity change from 0 to 32768
[  812.945530][T29743] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.9245: Failed to acquire dquot type 0
[  813.143160][ T9889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.310414][T29772] x_tables: duplicate underflow at hook 2
[  813.419654][T29774] loop1: detected capacity change from 0 to 512
[  813.448549][T20941] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  813.477073][T29774] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  813.510121][T29774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  813.545027][T29774] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.9252: Invalid block bitmap block 0 in block_group 0
[  813.588683][T29774] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem
[  813.628737][T29774] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.9252: attempt to clear invalid blocks 983261 len 1
[  813.658140][T29774] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.9252: Invalid inode table block 0 in block_group 0
[  813.677038][T29774] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  813.686498][T29791] loop5: detected capacity change from 0 to 256
[  813.696343][T20941] usb 3-1: Using ep0 maxpacket: 8
[  813.703494][T29791] exfat: Deprecated parameter 'namecase'
[  813.720026][T29791] exfat: Deprecated parameter 'namecase'
[  813.733717][T20941] usb 3-1: unable to get BOS descriptor or descriptor too short
[  813.742691][T29774] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  813.752923][   T23] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  813.766343][T20941] usb 3-1: config 8 has an invalid interface number: 61 but max is 2
[  813.773318][T29774] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.9252: Invalid inode table block 0 in block_group 0
[  813.796063][T29791] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  813.815429][T20941] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 3
[  813.825531][T29774] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  813.828939][T20941] usb 3-1: config 8 has no interface number 0
[  813.841695][T20941] usb 3-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0
[  813.851716][T20941] usb 3-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0
[  813.861577][T20941] usb 3-1: config 8 interface 61 has no altsetting 0
[  813.871494][T20941] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f
[  813.882389][T29774] EXT4-fs error (device loop1): ext4_truncate:4294: inode #11: comm syz.1.9252: mark_inode_dirty error
[  813.902370][T20941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.910492][T20941] usb 3-1: Product: syz
[  813.916965][T29774] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  813.927251][T20941] usb 3-1: Manufacturer: syz
[  813.934829][T29791] fuse: Bad value for 'fd'
[  813.939410][T20941] usb 3-1: SerialNumber: syz
[  813.945144][T29774] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.9252: Invalid inode table block 0 in block_group 0
[  813.972967][   T23] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  813.993969][T29774] EXT4-fs (loop1): 1 truncate cleaned up
[  813.997254][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.019488][T29774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  814.031593][   T23] usb 5-1: Product: syz
[  814.031622][   T23] usb 5-1: Manufacturer: syz
[  814.031638][   T23] usb 5-1: SerialNumber: syz
[  814.061785][   T23] usb 5-1: config 0 descriptor??
[  814.208791][T29774] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.9252: Invalid inode table block 0 in block_group 0
[  814.219678][T20941] bfusb: probe of 3-1:8.61 failed with error -5
[  814.234141][T29774] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  814.261709][T20941] usb 3-1: USB disconnect, device number 55
[  814.310006][   T23] hso 5-1:0.0: Failed to find BULK IN ep
[  814.342546][   T23] usb-storage 5-1:0.0: USB Mass Storage device detected
[  814.371591][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.564635][T20941] usb 5-1: USB disconnect, device number 38
[  815.068251][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  815.068269][   T28] audit: type=1326 audit(1770914645.448:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.5.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  815.093411][T29856] syz.5.9267 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  815.128546][   T28] audit: type=1326 audit(1770914645.448:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.5.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  815.207126][   T28] audit: type=1326 audit(1770914645.478:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.5.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  815.312033][   T28] audit: type=1326 audit(1770914645.538:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.5.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  815.388406][   T28] audit: type=1326 audit(1770914645.538:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.5.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  815.411422][T29870] veth0_macvtap: entered promiscuous mode
[  815.500088][T29865] loop4: detected capacity change from 0 to 4096
[  815.517465][T29865] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  815.632086][T29880] loop2: detected capacity change from 0 to 512
[  815.696430][T29880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  815.741927][T29880] ext4 filesystem being mounted at /2336/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  816.141421][T29903] loop4: detected capacity change from 0 to 1024
[  816.158290][T29903] EXT4-fs: Ignoring removed orlov option
[  816.217540][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.265317][T29903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  816.313942][T29903] ext4 filesystem being mounted at /1798/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  816.373516][T29914] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9284'.
[  816.520009][ T9889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  817.256109][T29966] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9298'.
[  817.395870][T29974] loop2: detected capacity change from 0 to 256
[  817.448450][T29974] exfat: Deprecated parameter 'utf8'
[  817.482903][T29974] exfat: Deprecated parameter 'namecase'
[  817.488725][T29974] exfat: Deprecated parameter 'namecase'
[  817.521214][T29974] exfat: Deprecated parameter 'utf8'
[  817.598575][T29974] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  817.789966][T29990] loop4: detected capacity change from 0 to 4096
[  817.826641][T29990] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  817.872489][  T788] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  818.004871][T29990] ntfs: volume version 3.1.
[  818.072547][  T788] usb 2-1: Using ep0 maxpacket: 16
[  818.094668][  T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  818.129336][  T788] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  818.155678][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.197530][  T788] usb 2-1: config 0 descriptor??
[  818.228583][  T788] pegasus_notetaker: probe of 2-1:0.0 failed with error -22
[  818.476832][  T788] usb 2-1: USB disconnect, device number 49
[  819.205836][ T5756] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  819.439369][ T5756] usb 6-1: Using ep0 maxpacket: 16
[  819.464520][ T5756] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  819.483401][ T5756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.487218][T30088] usb usb7: usbfs: process 30088 (syz.1.9332) did not claim interface 0 before use
[  819.508719][ T5756] usb 6-1: config 0 descriptor??
[  819.531940][ T5756] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  819.783032][ T5756] usb 6-1: Detected FT232B
[  819.836525][T30108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9338'.
[  819.992164][ T5756] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  820.010561][ T5756] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  820.029772][ T5756] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  820.105568][T30112] bond5: entered allmulticast mode
[  820.111289][T30122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9340'.
[  820.149409][ T5756] usb 6-1: USB disconnect, device number 39
[  820.183522][ T5756] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  820.230007][ T5756] ftdi_sio 6-1:0.0: device disconnected
[  820.369695][T30174] Timeout policy `syz1' can only be used by L3 protocol number 35067
[  820.748141][T30196] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  820.919756][T30195] loop2: detected capacity change from 0 to 8192
[  821.162805][ T5835] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  821.383274][ T5835] usb 5-1: Using ep0 maxpacket: 16
[  821.390803][ T5835] usb 5-1: config 127 has an invalid interface number: 102 but max is 2
[  821.421638][ T5835] usb 5-1: config 127 has no interface number 2
[  821.438197][ T5835] usb 5-1: config 127 interface 0 has no altsetting 0
[  821.466878][ T5835] usb 5-1: config 127 interface 1 has no altsetting 0
[  821.480749][ T5835] usb 5-1: config 127 interface 102 has no altsetting 0
[  821.501789][ T5835] usb 5-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d
[  821.521755][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.546474][ T5835] usb 5-1: Product: syz
[  821.553166][ T5835] usb 5-1: Manufacturer: syz
[  821.557836][ T5835] usb 5-1: SerialNumber: syz
[  821.856567][ T5835] usb 5-1: selecting invalid altsetting 0
[  821.863911][ T5835] usb 5-1: Could not set interface, error -22
[  821.877199][ T5835] usb 5-1: selecting invalid altsetting 0
[  821.894147][ T5835] usb 5-1: Could not set interface, error -22
[  821.912768][ T5835] usb 5-1: USB disconnect, device number 39
[  822.882157][T30324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9386'.
[  822.929274][T30324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9386'.
[  823.014636][T30328] cgroup: Invalid name
[  823.313404][T30346] ntfs3: nbd4: try to read out of volume at offset 0x0
[  823.369255][T30352] netlink: 'syz.1.9396': attribute type 10 has an invalid length.
[  823.433921][T30352] team0: Device hsr_slave_0 failed to register rx_handler
[  823.477021][T30350] loop2: detected capacity change from 0 to 4096
[  823.576160][T30350] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  823.807180][T30373] tc_dump_action: action bad kind
[  824.044234][    T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  824.098192][T30385] openvswitch: netlink: Actions may not be safe on all matching packets
[  824.265826][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  824.280700][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.290712][    T9] usb 5-1: Product: syz
[  824.300706][    T9] usb 5-1: Manufacturer: syz
[  824.306892][    T9] usb 5-1: SerialNumber: syz
[  824.334228][    T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  824.403511][  T788] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  824.854823][   T23] usb 5-1: USB disconnect, device number 40
[  825.027946][   T28] audit: type=1326 audit(1770914655.408:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30426 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  825.123167][   T28] audit: type=1326 audit(1770914655.408:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30426 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  825.200889][   T28] audit: type=1326 audit(1770914655.438:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30426 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  825.272357][   T28] audit: type=1326 audit(1770914655.438:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30426 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  825.344038][   T28] audit: type=1326 audit(1770914655.438:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30426 comm="syz.5.9416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409719bf79 code=0x7ffc0000
[  825.477620][  T788] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  825.508089][  T788] ath9k_htc: Failed to initialize the device
[  825.515031][T30440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9420'.
[  825.544396][   T23] usb 5-1: ath9k_htc: USB layer deinitialized
[  825.554557][T30440] netlink: 312 bytes leftover after parsing attributes in process `syz.5.9420'.
[  825.767904][T30449] loop1: detected capacity change from 0 to 512
[  825.895637][T30449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  825.931627][T30409] loop2: detected capacity change from 0 to 32768
[  826.046262][T30409] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  826.072785][T30409] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  826.097112][T30409] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms
[  826.116010][ T5835] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  826.123021][ T5835] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  826.157311][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  826.267538][ T5835] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms
[  826.296722][T30468] loop5: detected capacity change from 0 to 4096
[  826.325013][ T5835] gfs2: fsid=syz:syz.0: jid=0: Done
[  826.357329][T30409] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  826.367414][T30479] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  826.486844][T30468] NILFS error (device loop5): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  826.534156][T30468] Remounting filesystem read-only
[  827.173694][T30513] vivid-004: disconnect
[  827.203091][T30512] vivid-004: reconnect
[  827.620763][T30537] netlink: 'syz.5.9444': attribute type 1 has an invalid length.
[  827.782406][T30546] netlink: 'syz.5.9447': attribute type 10 has an invalid length.
[  827.966489][T30546] team0: Port device dummy0 added
[  827.994562][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9449'.
[  828.236511][T30564] xt_hashlimit: overflow, try lower: 3/0
[  828.410028][T30571] loop5: detected capacity change from 0 to 512
[  828.429421][T30571] EXT4-fs: Ignoring removed orlov option
[  828.460615][T30571] EXT4-fs: Ignoring removed nobh option
[  828.500123][T30571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  828.544573][T30571] EXT4-fs (loop5): orphan cleanup on readonly fs
[  828.569567][T30571] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.9455: bg 0: block 248: padding at end of block bitmap is not set
[  828.658335][T30571] Quota error (device loop5): write_blk: dquota write failed
[  828.666431][T30571] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  828.678860][T30571] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.9455: Failed to acquire dquot type 1
[  828.733391][T30571] EXT4-fs (loop5): 1 truncate cleaned up
[  828.774018][T30571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  828.845785][T30571] EXT4-fs: Ignoring removed orlov option
[  828.873576][T30571] EXT4-fs: Ignoring removed nobh option
[  828.879347][T30571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  828.973297][T30571] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  829.003327][T30571] EXT4-fs error (device loop5): __ext4_remount:6752: comm syz.5.9455: Abort forced by user
[  829.024636][T30571] EXT4-fs (loop5): Remounting filesystem read-only
[  829.031243][T30571] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  829.045952][T30571] ext4 filesystem being remounted at /1857/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  829.163508][T10014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  829.183851][T30607] loop4: detected capacity change from 0 to 256
[  829.223979][T30607] FAT-fs (loop4): "posix" option is obsolete, not supported now
[  829.690250][T30637] random: crng reseeded on system resumption
[  829.838563][T30647] SET target dimension over the limit!
[  829.856570][T30648] loop2: detected capacity change from 0 to 128
[  831.536180][T30739] x_tables: unsorted entry at hook 3
[  831.722410][ T5835] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  831.911644][T30751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9509'.
[  831.932755][ T5835] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  831.937872][T30721] loop4: detected capacity change from 0 to 32768
[  831.954413][ T5835] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  831.974426][ T5835] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  831.992766][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  832.007096][ T5835] usb 6-1: SerialNumber: syz
[  832.031205][ T5835] usb 6-1: 0:2 : does not exist
[  832.055123][T30721] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  832.219990][T30721] XFS (loop4): Ending clean mount
[  832.260639][T30721] XFS (loop4): Quotacheck needed: Please wait.
[  832.438655][T30721] XFS (loop4): Quotacheck: Done.
[  832.478421][T30787] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  832.569923][  T788] usb 6-1: USB disconnect, device number 40
[  832.647702][ T9889] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  833.528309][T30876] xt_ecn: cannot match TCP bits for non-tcp packets
[  833.936765][T30890] x_tables: duplicate underflow at hook 2
[  834.132312][T30873] loop2: detected capacity change from 0 to 32768
[  834.499574][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.507464][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.543128][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.549971][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.556921][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.563839][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.570630][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.577503][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.597607][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.607871][    C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe
[  834.779142][T30913] loop2: detected capacity change from 0 to 4096
[  834.815413][T30913] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  835.009701][T30931] loop5: detected capacity change from 0 to 8
[  835.044895][T30931] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  835.090648][ T5783] udevd[5783]: incorrect cramfs checksum on /dev/loop5
[  835.150200][T30931] cramfs: bad data blocksize 4293972856
[  835.183240][T30931] cramfs: bad data blocksize 4293972856
[  835.227159][T30940] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[  835.508466][T30953] ip6t_REJECT: ECHOREPLY is not supported
[  835.732835][T30967] netlink: 'syz.1.9559': attribute type 2 has an invalid length.
[  835.766731][T30967] netlink: 119 bytes leftover after parsing attributes in process `syz.1.9559'.
[  836.046449][T30987] netlink: 'syz.2.9565': attribute type 10 has an invalid length.
[  836.073304][T30987] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9565'.
[  836.292631][ T5835] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  836.487457][ T5835] usb 5-1: Using ep0 maxpacket: 8
[  836.505074][ T5835] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  836.522789][ T5835] usb 5-1: config 179 has no interface number 0
[  836.548816][ T5835] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  836.577144][ T5835] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  836.606754][ T5835] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  836.637545][ T5835] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  836.657814][ T5835] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  836.694961][ T5835] usb 5-1: config 179 interface 65 has no altsetting 0
[  836.713607][ T5835] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  836.736924][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.823974][ T5835] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input38
[  836.922931][ T5122] input input38: unable to receive magic message: -110
[  836.983437][ T5122] input input38: unable to receive magic message: -32
[  837.037026][ T5783] input input38: unable to receive magic message: -32
[  837.157641][ T5122] input input38: unable to receive magic message: -32
[  837.238746][ T5122] input input38: unable to receive magic message: -32
[  837.366528][   T23] usb 5-1: USB disconnect, device number 41
[  837.372798][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  837.404656][   T23] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  837.818121][   T28] audit: type=1326 audit(1770914668.198:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31087 comm="syz.2.9595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97b5f9bf79 code=0x0
[  838.051834][T31100] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9601'.
[  838.080215][T31100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9601'.
[  838.111194][T31100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9601'.
[  838.120480][T31104] netlink: 'syz.1.9600': attribute type 10 has an invalid length.
[  838.120505][T31104] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9600'.
[  838.335148][T31113] loop4: detected capacity change from 0 to 256
[  838.429217][T31113] FAT-fs (loop4): Directory bread(block 64) failed
[  838.455997][T31113] FAT-fs (loop4): Directory bread(block 65) failed
[  838.466188][T31113] FAT-fs (loop4): Directory bread(block 66) failed
[  838.491324][T31113] FAT-fs (loop4): Directory bread(block 67) failed
[  838.499538][T31113] FAT-fs (loop4): Directory bread(block 68) failed
[  838.520967][T31113] FAT-fs (loop4): Directory bread(block 69) failed
[  838.573177][T31113] FAT-fs (loop4): Directory bread(block 70) failed
[  838.579789][T31113] FAT-fs (loop4): Directory bread(block 71) failed
[  838.642688][T31128] xt_CT: You must specify a L4 protocol and not use inversions on it
[  838.651109][T31113] FAT-fs (loop4): Directory bread(block 72) failed
[  838.667528][T31113] FAT-fs (loop4): Directory bread(block 73) failed
[  839.138056][T31157] netlink: 'syz.2.9618': attribute type 7 has an invalid length.
[  839.507955][T31181] loop2: detected capacity change from 0 to 8
[  839.551553][T31181] SQUASHFS error: Failed to read block 0x636: -5
[  839.589513][T31181] SQUASHFS error: Unable to read metadata cache entry [634]
[  839.600014][T31181] SQUASHFS error: Unable to read metadata cache entry [634]
[  839.608490][T31181] SQUASHFS error: Unable to read directory block [629:0]
[  839.951909][T31196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9631'.
[  840.351858][T31208] netlink: 120 bytes leftover after parsing attributes in process `syz.5.9635'.
[  840.404291][T31208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9635'.
[  840.433452][T31208] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9635'.
[  840.480536][T31177] loop4: detected capacity change from 0 to 32768
[  840.537472][T31180] loop1: detected capacity change from 0 to 32768
[  840.557450][T31177] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  840.598408][T31180] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+"
[  840.612645][T31180] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)...
[  840.633517][T31229] xt_connbytes: Forcing CT accounting to be enabled
[  840.663271][T31180] gfs2: Invalid block size shift
[  840.702603][T31180] gfs2: fsid=(œ[{{{+: can't read superblock: -22
[  840.709104][T31232] overlayfs: missing 'lowerdir'
[  840.772623][   T23] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 
[  840.821577][   T23] XFS (loop4): Unmount and run xfs_repair
[  840.843646][   T23] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  840.875296][   T23] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00  XAGF............
[  840.923773][   T23] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01  ................
[  840.940510][   T23] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  840.972744][   T23] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00  ................
[  841.001921][   T23] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  841.032845][   T23] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01  ................
[  841.073345][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  841.096426][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  841.132630][ T5835] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  841.151147][T31177] XFS (loop4): metadata I/O error in "xfs_read_agf+0x294/0x590" at daddr 0x1 len 1 error 74
[  841.182646][T31177] XFS (loop4): Error -117 reserving per-AG metadata reserve pool.
[  841.191047][T31177] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592).  Shutting down filesystem.
[  841.247810][T31177] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  841.271589][T31177] XFS (loop4): Ending clean mount
[  841.288324][T31177] XFS (loop4): Failed to initialize disk quotas.
[  841.312736][T31177] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  841.332643][ T5835] usb 6-1: Using ep0 maxpacket: 8
[  841.344630][ T5835] usb 6-1: config 0 has an invalid interface number: 168 but max is 0
[  841.362877][ T5835] usb 6-1: config 0 has no interface number 0
[  841.394625][ T5835] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a
[  841.405540][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.418155][ T5835] usb 6-1: Product: syz
[  841.422785][ T5835] usb 6-1: Manufacturer: syz
[  841.427446][ T5835] usb 6-1: SerialNumber: syz
[  841.437570][ T5835] usb 6-1: config 0 descriptor??
[  841.484862][ T5835] mvusb_mdio: probe of 6-1:0.168 failed with error -5
[  841.498919][T31257] libceph: resolve '0.0' (ret=-3): failed
[  841.830045][ T5756] usb 6-1: USB disconnect, device number 41
[  841.897377][T31266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9646'.
[  842.096049][T31286] ipvlan0: entered promiscuous mode
[  842.151953][T31289] loop4: detected capacity change from 0 to 1024
[  842.166992][T31289] EXT4-fs: inline encryption not supported
[  842.184848][T31289] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  842.239038][T31289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  842.276473][T31289] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.9650: bad inode number: 15
[  842.306582][T31289] EXT4-fs (loop4): Remounting filesystem read-only
[  842.332621][T20941] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  842.370084][ T9889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  842.542816][T20941] usb 2-1: Using ep0 maxpacket: 8
[  842.554797][T20941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  842.579913][T20941] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  842.600546][T20941] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  842.620255][T20941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.640534][T20941] usb 2-1: Product: syz
[  842.646266][T20941] usb 2-1: Manufacturer: syz
[  842.658992][T20941] usb 2-1: SerialNumber: syz
[  842.689510][T20941] usb 2-1: config 0 descriptor??
[  842.830578][T31321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9658'.
[  842.850338][T31321] netlink: 440 bytes leftover after parsing attributes in process `syz.2.9658'.
[  843.184049][ T5756] usb 2-1: USB disconnect, device number 50
[  843.348244][T31313] loop5: detected capacity change from 0 to 32768
[  843.459224][ T1095] read_mapping_page failed!
[  843.471680][ T1095] ERROR: (device loop5): txCommit: 
[  843.471680][ T1095] 
[  843.496043][ T1095] jfs_write_inode: jfs_commit_inode failed!
[  844.675666][T31417] netlink: 'syz.5.9686': attribute type 7 has an invalid length.
[  844.731703][T31419] netlink: 'syz.4.9687': attribute type 63 has an invalid length.
[  844.762514][T31419] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9687'.
[  845.156638][T31440] loop2: detected capacity change from 0 to 1024
[  845.176778][T31440] EXT4-fs: inline encryption not supported
[  845.198172][T31440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  845.232168][T31444] SET target dimension over the limit!
[  845.254916][T31440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  845.333476][T31440] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.9694: bad inode number: 15
[  845.369182][T31440] EXT4-fs (loop2): Remounting filesystem read-only
[  845.474362][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  845.928557][T31519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9706'.
[  845.976141][T31511] loop5: detected capacity change from 0 to 4096
[  846.005573][T31511] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  846.120064][T31511] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  846.127707][T20941] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  846.163341][T31511] ntfs3: loop5: mft corrupted
[  846.178422][T31511] ntfs3: loop5: Failed to load $Extend (-22).
[  846.193163][T31511] ntfs3: loop5: Failed to initialize $Extend.
[  846.313115][T31511] ntfs3: loop5: ino=1b, "file0" failed to parse mft record
[  846.352562][T20941] usb 3-1: Using ep0 maxpacket: 16
[  846.357922][T31511] ntfs3: loop5: ino=1b, "file0" attr_set_size
[  846.375089][T20941] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  846.396571][T20941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  846.437529][T20941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  846.485605][T20941] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  846.514895][T20941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.542359][T20941] usb 3-1: Product: syz
[  846.557285][T20941] usb 3-1: Manufacturer: syz
[  846.562163][T20941] usb 3-1: SerialNumber: syz
[  846.573716][T31539] loop4: detected capacity change from 0 to 1024
[  846.589851][T31539] EXT4-fs: Ignoring removed orlov option
[  846.633503][T31539] EXT4-fs: Ignoring removed nomblk_io_submit option
[  846.676998][T31539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  846.847538][T20941] usb 3-1: 0:2 : does not exist
[  846.867091][ T9889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  846.873813][T20941] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1)
[  846.964377][T20941] usb 3-1: USB disconnect, device number 56
[  847.086355][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  847.135465][T31581] loop1: detected capacity change from 0 to 64
[  847.189629][T31581] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  847.210313][T31581] hfs: filesystem is marked locked, mounting read-only.
[  847.603982][T31602] net_ratelimit: 250 callbacks suppressed
[  847.604005][T31602] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  847.898957][T31612] loop4: detected capacity change from 0 to 4096
[  847.937428][T31612] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  848.099626][T31630] loop2: detected capacity change from 0 to 512
[  848.125739][T31632] loop5: detected capacity change from 0 to 136
[  848.159549][T31630] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  848.173900][T31612] ntfs3: loop4: failed to convert "c46c" to cp936
[  848.197051][T31630] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  848.206929][T31632] Symlink component flag not implemented
[  848.290243][T31630] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  848.363120][T31630] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  848.371386][T31630] System zones: 0-2, 18-18, 34-35
[  848.413534][T31630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.617860][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.808460][T31665] loop2: detected capacity change from 0 to 512
[  848.869101][T31665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  848.882656][T31665] ext4 filesystem being mounted at /2467/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  848.918878][T31673] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  849.023260][T31665] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.9739: corrupted xattr block 33: invalid checksum
[  849.178817][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  849.602371][T20941] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  849.671034][T31719] libceph: resolve '0.' (ret=-3): failed
[  849.813234][T20941] usb 6-1: Using ep0 maxpacket: 32
[  849.827938][T20941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  849.841878][T20941] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  849.882380][T20941] usb 6-1: config 0 interface 0 has no altsetting 0
[  849.909094][T20941] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  849.942102][T20941] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  849.961851][T20941] usb 6-1: Product: syz
[  849.971462][T20941] usb 6-1: Manufacturer: syz
[  849.980230][T31730] loop4: detected capacity change from 0 to 64
[  849.988456][T20941] usb 6-1: SerialNumber: syz
[  850.024964][T20941] usb 6-1: config 0 descriptor??
[  850.167219][T31731] bond6: entered promiscuous mode
[  850.186197][T31731] bond6: entered allmulticast mode
[  850.196687][T31731] 8021q: adding VLAN 0 to HW filter on device bond6
[  850.478502][T20941] gs_usb 6-1:0.0: Couldn't get device config: (err=-71)
[  850.502393][T20941] gs_usb: probe of 6-1:0.0 failed with error -71
[  850.538843][T20941] usb 6-1: USB disconnect, device number 42
[  850.677619][T31789] loop2: detected capacity change from 0 to 2048
[  850.764566][   T28] audit: type=1326 audit(1770914681.148:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31798 comm="syz.4.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  850.802431][T31801] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  850.827265][   T28] audit: type=1326 audit(1770914681.148:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31798 comm="syz.4.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  850.903675][   T28] audit: type=1326 audit(1770914681.178:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31798 comm="syz.4.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  850.938198][T31789] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  850.955649][   T28] audit: type=1326 audit(1770914681.178:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31798 comm="syz.4.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  850.991846][T31789] Remounting filesystem read-only
[  850.997700][T31789] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  851.036808][   T28] audit: type=1326 audit(1770914681.178:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31798 comm="syz.4.9766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0072d9bf79 code=0x7ffc0000
[  851.526268][T31832] loop1: detected capacity change from 0 to 64
[  851.759660][T31845] netlink: 'syz.2.9779': attribute type 1 has an invalid length.
[  852.160728][T31871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9786'.
[  852.256647][T31865] loop2: detected capacity change from 0 to 4096
[  852.283734][T31865] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  852.402805][T31865] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  852.429815][T31865] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  852.572440][T31885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9791'.
[  852.630093][T31888] xt_hashlimit: invalid rate
[  853.247129][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9798'.
[  853.265541][T31882] loop5: detected capacity change from 0 to 32768
[  853.295256][T31882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.9790 (31882)
[  853.355452][T31882] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  853.393293][T31882] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  853.421340][T31882] BTRFS info (device loop5): setting nodatasum
[  853.452390][T31882] BTRFS info (device loop5): force zlib compression, level 3
[  853.481013][T31882] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  853.524797][T31882] BTRFS info (device loop5): use lzo compression, level 0
[  853.546078][T31882] BTRFS info (device loop5): turning on flush-on-commit
[  853.583280][T31882] BTRFS info (device loop5): enabling auto defrag
[  853.589854][T31882] BTRFS info (device loop5): max_inline at 4096
[  853.617260][T31882] BTRFS info (device loop5): using free space tree
[  853.812519][T31882] BTRFS info (device loop5): enabling ssd optimizations
[  854.155670][T31966] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  854.241833][T10014] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  854.429824][T31976] loop1: detected capacity change from 0 to 512
[  854.528882][T31976] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  854.555547][T31976] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  854.613216][T31976] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  854.688813][T31976] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  854.736208][T31976] System zones: 0-2, 18-18, 34-35
[  854.750205][T31976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  854.999382][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.222496][T32012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9822'.
[  855.255202][T32012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  856.064265][T32059] netlink: 'syz.1.9837': attribute type 10 has an invalid length.
[  856.103912][T32059] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.9837'.
[  856.126233][T32059] openvswitch: netlink: Flow key attr not present in new flow.
[  856.347432][T32072] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9840'.
[  856.371649][T32077] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  856.573236][T32088] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  857.309261][T32121] loop1: detected capacity change from 0 to 4096
[  857.346190][T32121] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  857.550569][T32121] ntfs3: loop1: failed to convert "c46c" to macroman
[  857.607981][T32098] loop4: detected capacity change from 0 to 32768
[  857.712037][T32098] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  858.060284][T32098] XFS (loop4): Ending clean mount
[  858.075439][T32098] XFS (loop4): Quotacheck needed: Please wait.
[  858.198012][T32098] XFS (loop4): Quotacheck: Done.
[  858.419728][ T9889] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  858.564378][T32190] loop1: detected capacity change from 0 to 512
[  858.597267][T32190] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  858.618410][T32190] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  858.642068][T32190] EXT4-fs (loop1): 1 truncate cleaned up
[  858.654102][T32190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  858.717117][T32190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  859.032442][ T5756] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  859.044917][T32213] loop1: detected capacity change from 0 to 4096
[  859.088700][T32213] NILFS (loop1): invalid segment: Checksum error in segment payload
[  859.101481][T32213] NILFS (loop1): trying rollback from an earlier position
[  859.120143][T32213] NILFS (loop1): norecovery option specified, skipping roll-forward recovery
[  859.161008][T32213] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state
[  859.242555][ T5756] usb 6-1: Using ep0 maxpacket: 16
[  859.272481][ T5756] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  859.281527][ T5756] usb 6-1: config 0 has no interface number 0
[  859.311771][ T5756] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  859.344396][ T5756] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  859.364503][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.373203][ T5756] usb 6-1: Product: syz
[  859.377563][ T5756] usb 6-1: Manufacturer: syz
[  859.382192][ T5756] usb 6-1: SerialNumber: syz
[  859.403814][ T5756] usb 6-1: config 0 descriptor??
[  859.903257][ T5756] usbtouchscreen: probe of 6-1:0.214 failed with error -71
[  859.960230][ T5756] usb 6-1: USB disconnect, device number 43
[  860.406921][T32279] x_tables: unsorted underflow at hook 4
[  860.976447][T20941] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[  861.185272][T20941] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[  861.193912][T20941] usb 6-1: config 0 has no interface number 0
[  861.200175][T20941] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  861.219052][T20941] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  861.231494][T20941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.250546][T20941] usb 6-1: Product: syz
[  861.255352][T20941] usb 6-1: Manufacturer: syz
[  861.260011][T20941] usb 6-1: SerialNumber: syz
[  861.303530][T20941] usb 6-1: config 0 descriptor??
[  861.313168][T32293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  861.372542][T20941] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, d2:6b:42:aa:09:9d
[  861.892482][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9918'.
[  862.031763][T32374] loop4: detected capacity change from 0 to 512
[  862.056025][T32374] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  862.392783][T32374] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[  862.410449][T32395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9923'.
[  862.450515][T32395] netlink: del zone limit has 8 unknown bytes
[  862.640048][T32406] loop2: detected capacity change from 0 to 64
[  862.696685][T32406] hfs: unable to locate alternate MDB
[  862.712295][T32406] hfs: continuing without an alternate MDB
[  862.850416][   T34] 
[  862.852833][   T34] ======================================================
[  862.859889][   T34] WARNING: possible circular locking dependency detected
[  862.867008][   T34] syzkaller #0 Not tainted
[  862.871453][   T34] ------------------------------------------------------
[  862.878588][   T34] kworker/u4:2/34 is trying to acquire lock:
[  862.884597][   T34] ffff88805fbfdbf8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380
[  862.895459][   T34] 
[  862.895459][   T34] but task is already holding lock:
[  862.902859][   T34] ffff88801b3700b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0
[  862.912238][   T34] 
[  862.912238][   T34] which lock already depends on the new lock.
[  862.912238][   T34] 
[  862.922675][   T34] 
[  862.922675][   T34] the existing dependency chain (in reverse order) is:
[  862.931728][   T34] 
[  862.931728][   T34] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}:
[  862.939711][   T34]        __mutex_lock+0x136/0xcc0
[  862.945053][   T34]        hfs_find_init+0x17e/0x1f0
[  862.950196][   T34]        hfs_extend_file+0x361/0x1380
[  862.955602][   T34]        hfs_bmap_reserve+0x107/0x430
[  862.961033][   T34]        hfs_cat_create+0x1fe/0x6b0
[  862.966260][   T34]        hfs_mkdir+0x6c/0xe0
[  862.970870][   T34]        vfs_mkdir+0x296/0x440
[  862.975654][   T34]        do_mkdirat+0x1dc/0x450
[  862.980537][   T34]        __x64_sys_mkdirat+0x89/0xa0
[  862.985851][   T34]        do_syscall_64+0x55/0xa0
[  862.990818][   T34]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  862.997253][   T34] 
[  862.997253][   T34] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  863.006492][   T34]        __lock_acquire+0x2df1/0x7d40
[  863.011968][   T34]        lock_acquire+0x19e/0x420
[  863.017014][   T34]        __mutex_lock+0x136/0xcc0
[  863.022069][   T34]        hfs_extend_file+0xff/0x1380
[  863.027413][   T34]        hfs_bmap_reserve+0x107/0x430
[  863.032809][   T34]        __hfs_ext_write_extent+0x1fa/0x470
[  863.038754][   T34]        hfs_ext_write_extent+0x17f/0x210
[  863.044501][   T34]        hfs_write_inode+0xdc/0x880
[  863.049722][   T34]        __writeback_single_inode+0x705/0xec0
[  863.055818][   T34]        writeback_sb_inodes+0x7cd/0xf50
[  863.061485][   T34]        wb_writeback+0x46a/0xbf0
[  863.066541][   T34]        wb_workfn+0x400/0xe60
[  863.071330][   T34]        process_scheduled_works+0xa5d/0x15d0
[  863.077423][   T34]        worker_thread+0xa55/0xfc0
[  863.082593][   T34]        kthread+0x2fa/0x390
[  863.087203][   T34]        ret_from_fork+0x48/0x80
[  863.092169][   T34]        ret_from_fork_asm+0x11/0x20
[  863.097495][   T34] 
[  863.097495][   T34] other info that might help us debug this:
[  863.097495][   T34] 
[  863.107747][   T34]  Possible unsafe locking scenario:
[  863.107747][   T34] 
[  863.115219][   T34]        CPU0                    CPU1
[  863.120598][   T34]        ----                    ----
[  863.125983][   T34]   lock(&tree->tree_lock/1);
[  863.130718][   T34]                                lock(&HFS_I(tree->inode)->extents_lock);
[  863.139237][   T34]                                lock(&tree->tree_lock/1);
[  863.146477][   T34]   lock(&HFS_I(tree->inode)->extents_lock);
[  863.152480][   T34] 
[  863.152480][   T34]  *** DEADLOCK ***
[  863.152480][   T34] 
[  863.160639][   T34] 3 locks held by kworker/u4:2/34:
[  863.165770][   T34]  #0: ffff88801a25c938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  863.177029][   T34]  #1: ffffc90000aafd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  863.189502][   T34]  #2: ffff88801b3700b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0
[  863.199285][   T34] 
[  863.199285][   T34] stack backtrace:
[  863.205193][   T34] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0
[  863.212583][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  863.222665][   T34] Workqueue: writeback wb_workfn (flush-7:2)
[  863.228683][   T34] Call Trace:
[  863.231986][   T34]  <TASK>
[  863.234949][   T34]  dump_stack_lvl+0x18c/0x250
[  863.239658][   T34]  ? load_image+0x400/0x400
[  863.244191][   T34]  ? show_regs_print_info+0x20/0x20
[  863.249440][   T34]  ? print_circular_bug+0x12b/0x1a0
[  863.254664][   T34]  check_noncircular+0x2fc/0x400
[  863.259641][   T34]  ? look_up_lock_class+0x75/0x140
[  863.264772][   T34]  ? print_deadlock_bug+0x5d0/0x5d0
[  863.269989][   T34]  ? lockdep_lock+0xf5/0x230
[  863.274608][   T34]  ? _find_first_zero_bit+0xd3/0x100
[  863.279915][   T34]  __lock_acquire+0x2df1/0x7d40
[  863.284800][   T34]  ? arch_stack_walk+0x16e/0x190
[  863.289763][   T34]  ? ret_from_fork_asm+0x11/0x20
[  863.294730][   T34]  ? verify_lock_unused+0x140/0x140
[  863.299951][   T34]  ? stack_trace_save+0xaa/0x100
[  863.304918][   T34]  ? stack_trace_snprint+0xf0/0xf0
[  863.310061][   T34]  ? check_noncircular+0x18a/0x400
[  863.315199][   T34]  ? print_deadlock_bug+0x5d0/0x5d0
[  863.320444][   T34]  lock_acquire+0x19e/0x420
[  863.324991][   T34]  ? hfs_extend_file+0xff/0x1380
[  863.329955][   T34]  ? __might_sleep+0xe0/0xe0
[  863.334576][   T34]  ? read_lock_is_recursive+0x20/0x20
[  863.339980][   T34]  __mutex_lock+0x136/0xcc0
[  863.344531][   T34]  ? hfs_extend_file+0xff/0x1380
[  863.349518][   T34]  ? verify_lock_unused+0x140/0x140
[  863.354747][   T34]  ? hfs_extend_file+0xff/0x1380
[  863.359708][   T34]  ? mutex_lock_nested+0x20/0x20
[  863.364681][   T34]  hfs_extend_file+0xff/0x1380
[  863.369471][   T34]  ? hfs_ext_write_extent+0x152/0x210
[  863.374865][   T34]  ? hfs_write_inode+0xdc/0x880
[  863.379745][   T34]  ? hfs_get_block+0xc50/0xc50
[  863.384543][   T34]  ? trace_raw_output_contention_end+0xd0/0xd0
[  863.390732][   T34]  ? rcu_is_watching+0x15/0xb0
[  863.395527][   T34]  ? trace_contention_end+0x39/0xe0
[  863.400762][   T34]  ? __asan_memset+0x22/0x40
[  863.405387][   T34]  ? hfs_brec_find+0x19b/0x500
[  863.410180][   T34]  ? hfs_find_init+0x17e/0x1f0
[  863.414977][   T34]  hfs_bmap_reserve+0x107/0x430
[  863.419854][   T34]  __hfs_ext_write_extent+0x1fa/0x470
[  863.425257][   T34]  hfs_ext_write_extent+0x17f/0x210
[  863.430485][   T34]  ? verify_lock_unused+0x140/0x140
[  863.435737][   T34]  ? hfs_ext_find_block+0x190/0x190
[  863.440964][   T34]  ? blk_start_plug+0x51/0x1a0
[  863.445761][   T34]  hfs_write_inode+0xdc/0x880
[  863.450465][   T34]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  863.455866][   T34]  ? __writeback_single_inode+0x48d/0xec0
[  863.461627][   T34]  ? __lock_acquire+0x7d40/0x7d40
[  863.466672][   T34]  ? do_raw_spin_lock+0x11f/0x2c0
[  863.471733][   T34]  ? __rwlock_init+0x150/0x150
[  863.476527][   T34]  __writeback_single_inode+0x705/0xec0
[  863.482108][   T34]  writeback_sb_inodes+0x7cd/0xf50
[  863.487267][   T34]  ? queue_io+0x550/0x550
[  863.491639][   T34]  ? rcu_is_watching+0x15/0xb0
[  863.496431][   T34]  wb_writeback+0x46a/0xbf0
[  863.500965][   T34]  ? queue_io+0x351/0x550
[  863.505327][   T34]  ? percpu_ref_tryget+0x250/0x250
[  863.510466][   T34]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  863.516479][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  863.521702][   T34]  wb_workfn+0x400/0xe60
[  863.525985][   T34]  ? inode_wait_for_writeback+0x230/0x230
[  863.531742][   T34]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  863.537754][   T34]  ? read_lock_is_recursive+0x20/0x20
[  863.543159][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  863.548392][   T34]  ? process_scheduled_works+0x96f/0x15d0
[  863.554148][   T34]  ? process_scheduled_works+0x96f/0x15d0
[  863.559895][   T34]  process_scheduled_works+0xa5d/0x15d0
[  863.565486][   T34]  ? assign_work+0x430/0x430
[  863.570108][   T34]  ? assign_work+0x3d0/0x430
[  863.574730][   T34]  worker_thread+0xa55/0xfc0
[  863.579347][   T34]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  863.585268][   T34]  kthread+0x2fa/0x390
[  863.589357][   T34]  ? pr_cont_work+0x560/0x560
[  863.594062][   T34]  ? kthread_blkcg+0xd0/0xd0
[  863.598829][   T34]  ret_from_fork+0x48/0x80
[  863.603282][   T34]  ? kthread_blkcg+0xd0/0xd0
[  863.607902][   T34]  ret_from_fork_asm+0x11/0x20
[  863.612724][   T34]  </TASK>
[  863.754708][ T5756] usb 6-1: USB disconnect, device number 44
[  863.772035][ T5756] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  863.809713][T32413] loop4: detected capacity change from 0 to 32768
[  863.824266][T32413] JBD2: Ignoring recovery information on journal
[  863.866110][T32413] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  863.935226][ T9889] ocfs2: Unmounting device (7,4) on (node local)
[  863.998599][T32435] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  870.435982][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  870.442456][ T1281] ieee802154 phy1 wpan1: encryption failed: -22