last executing test programs:

3m14.187225436s ago: executing program 1 (id=612):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x4085, 0x9, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x65, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x65, 0x1, 0x5, [{@multicast2}]}]}}}}})
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0)

3m13.886594032s ago: executing program 1 (id=616):
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000000, 0x31, 0xffffffffffffffff, 0xf983e000)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002fc0))

3m13.634976667s ago: executing program 1 (id=618):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd)

3m13.388225072s ago: executing program 1 (id=620):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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")
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E'])
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}]})

3m13.096150107s ago: executing program 1 (id=624):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x2, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0)

3m12.638227866s ago: executing program 1 (id=625):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xc0, 0x0, 0x0, 0x0, 0x3})

3m12.081912357s ago: executing program 32 (id=625):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[], 0xfe, 0x61f6, &(0x7f000000cdc0)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDTe54lnN7tdp7Z31p7PR3JmfvPMep/Jd189L08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPH97/1grRURN36eFqxEfCY6Ee2IpbJejYil1ZW8fjcinou95ng2InoLEeXt9/55OuLViPjobMTO7uZ6ufjyAfvx3T/+/Xc/PPPW3/7Qu/jfP93rvDZpvfv3f/WfPz843DYDAABA0xRFUbTS1/xz6ft9u+5OAQAzkd//iyQvP/X1r//51l/mqT/qRtcRl/YWzkt/1Gr16a2rivEeVIuI2KrepvzMYHc8AJwwW/Fx3V2gRvJvtG5EnKm7E8Bca9XdAY7Fzu7meivl26q+H6wO2vOxIEP5b7Uend8xaTrN6DEms3p8bUcnnpnQn6UZ9WGe5Pzbo/nfGLT303rHnf+sTMq/Pzj1qXFy/p3R/Eccaf4LdebfHpt/U+X8u0+Uf+cEP//lDwAAAADA6Zf//r9S8/7fhcNvyoF80v7f1Rn1AQAAAAAAAACO2mHH/3vE+H8AAAAwt8rv6qXfnN1fNulabOXy662Ip0bWBxomnSyzXHc/AAAAAAAAAAAAAKBJuoNjeK+3InoR8dTyclEU5U/VaP2kDnv7k67p2w9NVveLPAAADHx0duRc/lbEYkRcT9f66y0vLxfF4tJysVwsLeTPs/2FxWKp8r02T8tlC/0DfCDu9ovyly1Wblc17fvytPbR31feV7/oHKBjR6SX/jcnNNcUNgAkg3ejHe9Ip0xRPD3pwwcM8fw/hVZipe7HFfOv7ocpAAAAcPyKoiha6XLe59I+/3bdnQIAZiK//4/uFzhU3Z7QHnE0v1+tVqvVavWnqquK8R5Ui4jYqt6m/MxgOH4AOGG24uO6u0CN5N9o3Yh4ru5OAHOtVXcHOBY7u5vrrZRvq/p+kMZ3z8eCDOW/1dq7Xb79uOk0o8eYzOrxtR2deGZCf56dUR/mSc6/PZr/jUF7P6133PnPyqT8+3unzDVPzr8zmv+I05N/e2z+TZXz7z5R/h35AwAAAADAHMt//1+x/zdvMgAAAAAAAACcODu7m+v5vNe8//9zY9Zz/ufplPNvPWn+S2le/idazr89kv+XR9brVOYfvrn//P/37ub67+/967N5etD8F/JMKz2yWukR0Ur31Oqm6WG27nHbvU6/vKdeq93ppmN+it47cStux0ZcGlq3nf4/9tvXhtrLnvaG2i8PtXcfa78y1N5L1x0olnL7hViPn8TteHuvvWxbmLL9i1PaiyntOf+O1/9Gyvl3Kz9l/supvTUyLT38sP3Y8746HXc/b9z6/C8vHf/mTDHpyseD7Ts/6+5EDF5xzvTjZ3c37ly4f/PevTtrkSZDSy9HmhyxnH9v72dh//X/hUF7ft2vPl8ffth/4vznxXZ0Hz22q8r8X6jMl9v70oz7Voecfz/95PzfTu3jn/8nOf/OxPxfrqE/AAAAAAAAAAAAAAAA8EmKotg7RfSNiLiazv+p69xMAGC28vt/keTlarVarVarT19dVYz3erWIiL9Wb1N+ZvjFuF8GAMyz/0XEP+ruBLWRf4Pl6/2V0xfr7gwwU3ff/+BHN2/f3rhzt+6eAAAAAAAAAACfVh7/c7Uy/vOLEbEyst7Q+K9vxuphx//s5plHA4we8UDfE2y3+512Zbjx52NvfO4Lk8b/Ph+Pj/+dx8TtVLdjgt6U9v6U9oUp7Ytjl+6nNfZEj4qc//OV8c7L/M+NDL/ehPFfR8e8b4Kc//nK47nM/0sj61XzL347d/lvHXTF7WgP5X/x3ns/vXj3/Q9eufXezXc33t348ZW1tUtXrl69du3axXdu3d64NPj3eHo9B3L+eexrx4E2S84/Zy7/Zsn5fyHV8m+WnP8XUy3/Zsn558978m+WnH/+7iP/Zsn5v5Rq+TdLzv8rqZZ/s+zsbi6U+b+cavk3S37+fzXV8m+WnP8rqZZ/s+T8L6Ra/s2S87+Y6gPk7/Lwp0jOP+/h8vxvlpz/Wqrl3yw5/8upln+z5PyvpFr+zZLzfzXV8m+WnP/XUi3/Zsn5X021/Jsl5//1VMu/WXL+11It/2bJ+X8j1fJvlpz/N1Mt/2bJ+b+Wavk3S87/W6mWf7Pk/L+davk3S87/O6mWf7Pk/F9PtfybZf/6/2bMmDGTZ+p+ZQIAAAAAAAAAAAAARs3icOK6txEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHdvMXLd9R3Az+zF3nUIMRCCkxrYJCaEZMmu7cQX2jQmXBugFEgo9ILtetdmwTe8dgkUyaaBEgmjooqq6UNbQKiNVFVYFQ+0ojQPVS9PpX2gLxVVJaRGVUABFamtKFvNnP//vzOzszOz3vF69vw/Hyn57c6cmXPmzJnZ/e76uwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrd/ob5z9SKoqj/1/jf9qJ4Qf3jyantjcted723EAAAAFiv/2v8//mb0gWH+rhR0zJ/94p//NrS0tJS8b7R3x3/wtJSumKqKMa3FkXjuujKv7+/1rxM8EQxURtp+nykx+pHe1w/1uP68R7Xb+lx/dYe10/0uH7FDlhhsvx5TOPOdjU+3F7u0uLmYrxx3a4Ot3qitnVkJP4sp6HWuM3S+PFioThZzBezLcuXy9Yay3/j9vq63lrEdY00rWtn/Qj5wSeOxW2ohX28q2Vdy/cZfe/1xdQPf/CJY398/rlbO82eu6Hl/srtvPuO+nZ+KlxSbmut2Jr2SdzOkabt3NnhORlt2c5a43b1j9u38/k+t3N0eTM3VPtzPlGMND7+VmM/jTX/WC/tp53hsv++syiKS8ub3b7MinUVI8W2lktGlp+fifKIrN9H/VB6cTG2puP09j6O0/qc29V6nLa/JuLzf3u43dgq29D8NH3vk1tWPO9rPU6j+qNe7bXSfgwO+rUyLMdgPC6+1XjQT3Y8BneFx/+Ju1Y/BjseOx2OwfS4m47BO3odgyNbRhvbnJ6EWuM2y8fg7pblRxtrqjXms3d1PwZnzp86O7P4sY+/duHU0RPzJ+ZP7929e3bvvn0HDhyYOb5wcn62/P9V7u3ht60YSa+BO8K+i6+BV7ct23yoLn1pcK/DiS6vw+1tyw76dTjW/uBqG/OCXHlMl6+NR+s7feLySLHKa6zx/Nyz/tdhetxNr8Oxptdhx68pHV6HY328DuvLnL2nv+9Zxpr+67QN1+prwfamY7D9+5H2Y3DQ348MyzE4EY6Lf71n9a8FO8P2Pjm91u9HRlccg+nhhvee+iXp+/2JA43R6bi8rX7FDVuKC4vz5+57/Oj58+d2F2FsiJc0HSvtx+u2psdUrDheR9Z8vB5aeMWTt3W4fHvYVxOvrf9vYtXnqr7M/fd1f64aX90678+WS/cUYQzYRu/PTl/N6/szZcku+7O+zKdm1v+9eMqlTe+/46u8/8bc/5NyfemunhgdHytfv6Np74y3vB+3PlVjjfeuWmPdz8/09348Hv7b6Pfjm7u8H+9oW3bQ78fj7Q8uvh/Xev20Y33an8+JcJycnO3+flxfZseetR6TY13fj+8Msxb2/2tCUki5qOnYWe24TesaGxsPj2ssrqH1ON3bsvx4yGb1dT295+qO07vvLO9rND26ZRt1nE61LTvo4zS9X612nNZ6/fTt6rQ/nxPhuLh5b/fjtL7MM/ev/71zMn7Y9N65pdcxOD66pb7N4+kgLN/vlybjMXhfcaw4U5ws5hrXbmkcT7XGuqYf6O8Y3BL+2+j3yh1djsG725Yd9DGYvo6tduzVxpbfSAao/fmcCMfFUw90Pwbry7xx/2C/d707XJKWafretf3na6v9zOu2seX7K67xz7zq2/k3+7v/bLa+zMkDa82Z3ffTveGSGzrsp/bX72qvqbliY/bTjrCdzx1YfT/Vt6e+zBcO9nk8HSqK4uJHHm78vDf8fuXPL3z7ay2/d+n0O52LH3n4+zce/9u1bD8Am99PyrGt/FrX9Jupfn7/DwAAAGwKMfePhJnI/wAAAFAZMffHfxWeyP8AAABQGTH3j4WZZJL/d7zxuYWfXCxSM38piNen3fBIuVzsuM6Gz6eWltUvf/gr8z/6y4v9rXukKIofP/IbHZff8UjcrtJU2M4rb2q9fOUNL/a1/iOPLS/X3F//Yrj/+Hj6PQw6VXBni6L4xk2fa6xn6v2XG/OZR4405rsvPflEfZnnD5afx9s/+5Jy+T8I5d9Dx4+23P7ZsB++G+bs2zrvj3i7r15+zc79711eX7xd7Y4XNh72Ux8o7zf+nZzPP1EuH/fzatv/V599+qv15R9/VeftvzjSefufDvf7lTD/5+Xl8s3PQf3zeLtPh+2P64u3u+/L3+y4/Vc+Uy5/9s3lckfCjOu/O3y+683PLTTvr8drR1seV/GWcrm4/tlv/3bj+nh/8f7bt3/i8OWW/dF+fDzzz+X9zLQtHy+P64n+om399ftpPj7j+p/+rSMt+7nX+q+8+9mX1++3ff33ti032nb79r/Y9Ief/lzH9cXtOfRnZ1sez6F3hddxWP9THwjHY7j+f698rmW90ZF3tb7/xOW/uP1iy+OJ3vrDcv1XHjrRmP8x9aPfv+EFN77w0ivr+64ovvWe8v56rf/EH51p2f4v3XJP4/mI18eOfvv6VxPXf+6j06fPLF5YmGvaq42/nfP2cnu2Tkxuq2/vTeG9tf3zw2fOf3D+3NTs1GxRTFX3T+hdtS+H+f1yXFrr7e95LDyft/3eN7bd9U+fjZf/y6Pl5ZffVn7denVY7vPh8u3l87dUW+f6n7r9lsbru/ZM+XlLj30Adu76zwN9LRgef/v3BfF4P/vSDzb2Q/26xteN+Lpe5/Z/Z668n6+H/boU/jLzHbcsr695+fi3ES6/p3y9r3v/hbe5+Lz+SXi+3/Hd8v7jdsXH+53wfcw3d7S+38Xj4+sXR9rvv/FXPC6F95PiUnl9XCru78vP39Jx8+LfISku3dr4/HfS/dy6poe5msWPLc6cXDh94fGZ8/OL52cWP/bxw6fOXDh9/nDjb3ke/lCv2y+/P21rvD/Nze+7v5idLIriTDG7AW9Y12b76x/1t/1nHzs2t3/2rrn540cvHD//2Nn5cyeOLS4em59bvOvo8ePzH+11+4W5B3fvObh3/57pEwtzDx44eHDvwemF02fqm1FuVA/7Zj88ffrc4cZNFh+8/+DuBx64f3b61Jm5+Qf3z85OX+h1+8bXpun6rX99+tz8yaPnF07NTy8ufHz+wd0H9+3b0/OvAZ46e3xxaubchdMzFxbnz82Uj2XqfOPi+te+Xrenmhb/rfx+tl2t/EN8xTvv3Zf+PmvdVz656l2Vi7T9AdHnwt+i+YcXnT3Qz+cx94+HmWSS/wEAACAHMfdvCTOR/wEAAKAyYu7fGmYi/wMAAEBlxNw/EWaSSf7X/9f/76//X16v/59X///sR8pe6Wbv/8f+vP5/Hq5z/3/d69f/1/+vXv+///78Zt9+/X/9f1Yatv5/zP2TRZFl/gcAAIAcxNy/LcxE/gcAAIDKiLn/hjAT+R8AAAAqI+b+F4SZZJL/9f/76v/v6VW4qn7/3/n/9f+Lzdn/j0+O/n821ty/f++jLZ/q/wf6//r/+v/6//r/rNv4qtdcr/5/zP03hplkkv8BAAAgBzH3vzDMRP4HAACAyoi5/6YwE/kfAAAAKiPm/u1hJpnkf/1/5//X/9f/r3T/f73n/2/aGP3/zcH5/7vT/+/hqvv/E/r/m7H/Pz7Y7R/u/n/Pzdf/55oYtvP/x9z/ojCTTPI/AAAA5CDm/heHmcj/AAAAUBkx978kzET+BwAAgMqIuf/mMJNM8r/+v/6//r/+v/5/5/X3Pv9/+ZH+/3DR/+9O/78H5//Pq/8/4O0f7v7/oM//P/6m9tvr/9PJsPX/Y+5/aZhJJvkfAAAAchBz/y1hJvI/AAAAVEbM/S8LM5H/AQAAoDJi7t8RZpJJ/tf/1//X/9f/1//vvP7e/f+S/v9w0f/vTv+/B/1//X/9//76/x2++dX/p5Nh6//H3H9rmEkm+R8AAAByEHP/bWEm8j8AAABURsz9PxVmIv8DAABAZcTcvzPMJJP8r/+v/6//n1f//94t+v/6/9Wm/9+d/n8P+v/6//r/fZ7/f6W19P+39rozKmPY+v8x9788zCST/A8AAAA5iLn/FWEm8j8AAABURsz9rwwzkf8BAACgMmLunwozyST/6/9Xq///p3/91CsL/X/9/x7rH0T/vxYuHaL+fzwMhr7//5D+/zWl/9+d/n8P+v/6//r/G9L/Jx/D1v+Puf/2MJNM8j8AAADkIOb+O8JM5H8AAACojJj77wwzkf8BAACgMmLu3xVmkkn+1/+vVv8/0v/X/++2/o06//9YeD7Tcen8/87/vwH0/ztoepHq//eg/6//n33/P373q//PYAxb/z/m/leFmWSS/wEAACAHMfffVbT9Elf+BwAAgMpo5P5ionh1mIn8DwAAAJURc//dYSaZ5H/9/6vv/483faz/37r9+v+tcu3/b/D5/xP9/7zp/3e31v7/Fv1//X/9/8z6/+s7//9k+Fj/n2jY+v8x978mzCST/A8AAAA5iLn/njAT+R8AAAAqI/77zfLfvcr/AAAAUEUx90+HmWSS//X/nf8/p/5/Tf9/QP3/+Ij1/wv9/6Gj/9+d8//3oP+v/6//v67+v/P/027Y+v8x9782zCST/A8AAAA5iLn/vjAT+R8AAAAqI+b+mTAT+R8AAAAqI+b+2TCTTPK//r/+f079f+f/d/5//f/q0//vTv+/B/1//f+q9f+LQv+f62rY+v8x9+8OM8kk/wMAAEAOYu7fE2Yi/wMAAEBlxNy/N8xE/gcAAIDKiLn//jCTTPK//r/+v/6//r/+f+f16/9vTvr/3en/96D/r/9ftf6/8/9znQ1b/z/m/gfCTDLJ/wAAAJCDmPv3hZnI/wAAAFAZMffvDzMJ+b/Tv+sGAAAANpeY+w+EmWTy+3/9/4r0/3/z71vWrf+v/99t/YPp/0/q/4ep/z9cKtr/b39ZXDX9/x70//X/9f/1/xmoYev/x9x/MMwkk/wPAAAAOYi5/3VhJvI/AAAAVEbM/T8dZiL/AwAAQGXE3P8zYSaZ5P/B9v8n9f+bZHX+/8nW7df/73x8VKv/7/z/+v/DqaL9/4GpVP9/RP9f/3+4tl//X/+fla59/z9+1F//P+b+B8NMMsn/AAAAkIOY+382zET+BwAAgMqIuf+hMBP5HwAAACoj5v5DYSaZ5H/n/9f/d/5//f9r0/9/qGg3jP3/+sGj/18t+v/dVar/7/z/+v9Dtv36//r/rDRs5/+Puf/1YSaZ5H8AAADIQcz9D4eZyP8AAABQGTH3vyHMRP4HAACAyoi5/41hJpnkf/1//X/9f/1/5//vvH79/81J/787/f8e9P/1//X/9f8ZqGHr/8fc/6Ywk0zyPwAAAOQg5v43h5nI/wAAAFAZMfe/JcxE/gcAAIDKiLn/rWEmmeR//X/9f/1//X/9/87r1//fnPT/u9P/70H/X/9f/1//n4Eatv5/zP0/F2aSSf4HAACAHMTc/0iYifwPAAAAlRFz/9vCTOR/AAAAqIyY+98eZpJJ/tf/38T9/zH9f/1//X/9/97rzY3+f3f6/z3o/+v/6//r/zNQw9b/j7n/HWEmmeR/AAAAyEHM/T8fZiL/AwAAQGXE3P/OMBP5HwAAACoj5v5fCDPJJP/r/2/i/n8lz/+/dLH5dhXr/9cX0/+/Xv3/+o30/7Og/9+d/n8PHfr/W/X/8+r/L4V3ef1//X8GYtj6/zH3vyvMJJP8DwAAADmIuf/dYSbyPwAAAFRGzP3vCTOR/wEAAKAyYu5/NMwkk/yv/59l/z895OHr/692/v/JxnWbvP/v/P/O/6//vwGq2/9f8111pP/fg/P/6/87/7/+PwM1bP3/mPsfCzPJJP8DAABADmLuf2+YifwPAAAAlRFz/y+Gmcj/AAAAUBkx978vzCST/K//n2X/f4jP/79a/3+znv9/rCgml9eTU/9/oun5TMel/r/+/waobv9/MPT/e9D/1/8f5v5/OJonV7m9/j/DaNj6/zH3vz/MJJP8DwAAADmIuf+XwkzkfwAAAKiMmPt/OcxE/gcAAIDKiLn/V8JMMsn/+v/6//r/zv/v/P+d16//vznp/3en/9+D/r/+/zD3/3vQ/2cYDVv/P+b+Xw0zWTX4ff+/+niYAAAAwBCJuf8DYSaZ/P4fAAAAchBz/+EwE/kfAAAAKiPm/iNhJpnkf/3/9v5/PKOq/r/+v/6//r/+/2Y0uP7/y24sCv3/yvT/J/rcAP1//X/9f/1/BmrY+v8x9x8NM8kk/wMAAEAOYu7/tTAT+R8AAAAqI+b+Y2Em8j8AAABURsz9c2EmmeT/69j/Hx/O/r/z/19t///H+v/6/4H+f2f6/xvD+f+7y7b/3y/9f/1//X/9fwZq2Pr/MffPh5lkkv8BAACgwtKPg2PuPx5mIv8DAABAZcTcfyLMRP4HAACAyoi5/4NhJpnkf+f/1/93/v/r0f8fa1le/7+k/6//Pwj6/93p//eg/6//r/+v/89ADVv/P+b+hTCTTPI/AAAA5CDm/g+Fmcj/AAAAUBkx9384zET+BwAAgMqIuf9kmEkm+V//X/8/9/5/rSguOf+//n+n9ev/b076/93p//eg/6//r/+v/89ADVv/P+b+U//P3n002XVWexw+9pUVbtWty0fwmBFDGJmPwJQZVYzJJgdZ5Awm52CyyTmDyTnnbHKOJhqqRLm11pK6z+m9JfXuPnu/7/NM1m2V+p7TVlvwp+tXO27pZP8DAABAD3L33zNusf8BAACgGbn77xW32P8AAADQjNz9945bOtn/+n/9f+/9/2orz//f/fv1/+fo//X/U1jr749t/n37ReH79v93uOO1d9P/6//1/4P0//p//T97za3/z91/n7ilk/0PAAAAPcjdf9+4xf4HAACAZuTuv1/cYv8DAABAM3L3Xxu3dLL/9f/6f/2//n9X/3+T/l//v2ye/z9M/z9C/6//1//r/5nU3Pr/3P33j1s62f8AAADQg9z9D4hb7H8AAABoRu7+B8Yt9j8AAAA0I3f/g+KWTva//l//r/9fSv9/3PP/93w9+n/9/yb6/2H6/xH6f/2//l//z6Tm1v/n7n9w3NLJ/gcAAIAe5O5/SNxi/wMAAEAzcvc/NG6x/wEAAKAZufsfFrd0sv/1//p//f9S+v8jev6//l//v3A3rM7/naD/X6f/HzHS/69W+v8hF93Pb/7ylvP+96H/1/+zbm79f+7+h8ctd16tjl/uFwkAAADMSu7+R8Qtnfz8HwAAAHqQu/903GL/AwAAQDNy918Xt3Sy//X/+n/9v/5f/7/59fX/y+T5/8MO3v/f/nb3uHu//X8zz/8/u+m/uWy/nz+obb//6fv/274z9P8s29z6/9z9Z+KWTvY/AAAA9CB3/yPjFvsfAAAAmpG7/1Fxi/0PAAAAzcjd/+i4pZP9r/9vrf//n12fd0H/v1O76P/1//p//X/r9P/DPP9/xM5fc6fqw2b7/31su59f+vv3/H/9P+vm1v/n7n9M3NLJ/gcAAIAe5O5/bNxi/wMAAEAzcvc/Lm6x/wEAAKAZufsfH7d0sv/1/631/7s/z/P/9f+bXl//r/9vmf5/mP5/RCvP/7/M75pt9/MHte33r//X/7Nubv1/7v4nxC2d7H8AAADoQe7+J8Yt9j8AAAA0I3f/k+IW+x8AAACakbv/yXFLJ/tf/6//X0b/n6+g/9f/H37/n/T/y/O/+v9R+v8RrfT/l2nb/fzS37/+X//Purn1/7n7nxK3dLL/AQAAoAe5+58at9j/AAAA0Izc/U+LW+x/AAAAaEbu/qfHLZ3sf/2//n8Z/b/n/+v/Pf9f/39x9P/D9P8j9P/6f/2//p9Jza3/z91/fdzSyf4HAACAHuTuf0bcYv8DAABAM3L3PzNusf8BAACgGbn7nxW3dLL/9f/6f/2//l//v/n19f/LpP8fpv8fof/X/+v/9f9Makb9/wWfdXL17Lilk/0PAAAAPcjd/5y4xf4HAACAZuTuf27cYv8DAABAM3L3Py9u6WT/6/9n0//v5Hxt9f+nVquV/n/Vaf9/6oI/z/q+1P/r/4+A/n+Y/n+E/l//r//X/zOpGfX/Ox/n7n9+3NLJ/gcAAIAe5O5/Qdxi/wMAAEAzcve/MG6x/wEAAKAZuftfFLd0sv/1/7Pp/3e01f97/v/e74+e+n/P/1+n/z8a+v9h+v8R+n/9v/5f/8+k5tb/5+5/cdx0/KrL/hIBAACAmcnd/5K4pZOf/wMAAEAPcve/NG6x/wEAAGChrl/7ldz9L4tbOtn/+v9p+//jF/ya/l//v/f7Q/+v/9f/Hz79/zD9/wj9v/5f/6//Z1Jz6/9z9788bulk/wMAAEAPcvffELfY/wAAANCM3P2viFvsfwAAAGhG7v5Xxi2d7H/9v+f/6//1//r/za+v/18m/f8w/f8I/b/+f7v9/4nz/6f+nzZcQv9/9uzZ04fe/+fuf1Xc0sn+BwAAgCbt+Vlp7v5Xxy32PwAAADQjd/9r4hb7HwAAAJqRu/+1cUsn+1//32n/n9/qy+r/r1ut9P/6f/2//n+Y/n+Y/n+E/l//7/n/+n8mNbfn/+fuf13c0sn+BwAAgB7k7r8xbrH/AQAAoBm5+18ft9j/AAAA0Izc/W+IWzrZ//r/Tvt/z//X/+v/j7r/v3Wl/z8Si+j/T+3/+nPv/8/o//X/A7rr/+9yp10f6v/1/6ybW/+fu/+NcUsn+x8AAAB6kLv/TXGL/Q8AAADNyN3/5rjF/gcAAIBm5O5/S9x0rJP9r//X/+v/9f/6/82vf8TP/z++Wq30/xNYRP8/YO79/zTP/9/7b/l5+n/9/5Lfv/5f/8+6ufX/ufvfGrd0sv8BAACgB7n73xa32P8AAADQjNz9b49b7H8AAABoRu7+d8Qtnex//b/+X/+v/59V/3/FIfT/ZxbR/3v+/0T0/8Pm0f/vT/+v/1/y+9f/6/+5eNvq/3P3vzNu6WT/AwAAQA9y978rbrH/AQAAoBm5+98dt9j/AAAA0Izc/e+JWzrZ//p//f+l9P/5Pnvr/0/F72u1/z8xp/5/5++Zk7v+/3Xy/H/9/0T0/8P0/yP0//p//f/1+n+mNLfn/+fuf2/c0sn+BwAAgB7k7n9f3Pqfbu1/AAAAaEbu/vfHLfY/AAAANCN3/wfilk72v/5f/+/5/57/P6vn/58+hOf/6/+7ov8fpv8fof/X/+v/Pf+fSc2t/8/d/8G4pZP9DwAAAD3I3f+huMX+BwAAgGbk7v9w3GL/AwAAQDNy998Ut3Sy//X/+n/9v/5f/3/uz1D/3wb9/7Cj6f9P6f/1/9XPXxH/Fuj/9f9jn0+b5tb/5+7/SNzSyf4HAACAHuTu/2jcYv8DAABAM3L3fyxusf8BAABgkY5t+LXc/R+PWzrZ//p//b/+f8L+/8qV/n+h/f+m19f/L9NW+v/8ptD/e/5/6Kf/v3rXR9t+/v+xS3z/e//zaxv9/wXrQ/9Pk+bW/+fu/0Tc0sn+BwAAgB7k7v9k3GL/AwAAQDNy938qbrH/AQAAoBm5+z8dt/Sw//9P/7/S/x+k/z+j//f8f/2//n9uPP9/mP5/hP5/q8/PX/r79/x//T/r5tb/5+7/TNzSw/4HAACATuTu/2zcYv8DAABAM3L3fy5usf8BAACgGTu7P+OyDve//l//7/n/+n/9/+bX1/8vk/5/mP5/hP5f/6//1/8zqbn1/5/f+ayTqy/ELZ3sfwAAAOhB7v4vxi32PwAAADQjd/+X4hb7HwAAAJqRu//LcUsn+1//r/9fRv9/9uzZ0/p//f/ur+d8/3+z/p+i/x+m/x+h/9f/6//1/0xqbv1/7v6vxC2d7H8AAADoQe7+r8Yt9j8AAAA0I3f/1+IW+x8AAACakbv/63FLJ/tf/z+D/v+k/t/z//X/K8//1/9PRP8/TP8/osX+/+TFf/nb7ucPatvvX/+v/2fd3Pr/3P3fiFs62f8AAADQg9z934xb7H8AAABoRu7+b8Ut9j8AAAA0I3f/t+OWTva//v/o+v/b/tn18vz/U6vN71//r//X/+v/D5v+f5j+f0SL/f8l2HY/v/T3r//X/7Nubv1/7v7vxC27h99Vl/ZVAgAAAHOSu/+7cUsnP/8HAACAHuTu/17cYv8DAABAM3L3fz9u6WT/6/9n8Pz/Bvt/z//f/P2h/591/3+l/r8N+v9h+v8R+n/9v/5/ov4/v5v1/72bW/+fu/8HcUsn+x8AAAB6kLv/h3GL/Q8AAADNyN3/o7jF/gcAAIBm5O6/OW65YP9vartbof/X/+v/9f/6/82vr/9fJv3/sIvt/0+sDtb/J/2//l//32v/7/n/nDO3/j93/4/jFj//BwAAgMW5ap9fz93/k7jF/gcAAIBm5O7/adxi/wMAAEAzcvf/LG655cptvaUjpf/X/+v/9f/6/82vr/9fJv3/MM//H6H/n6Kfv0b/30b/v1rp/zm4ufX/uft/Hrf4+T8AAAA0I3f/L+IW+x8AAACakbv/l3GL/Q8AAADNyN3/q7ilk/2v/9f/H7D/30kz9f/n6P/P0f9vpv8/Gvr/Yfr/Efp/z//X/3v+P5OaW/+fu//XcUsn+x8AAAB6kLv/N3GL/Q8AAADNyN3/27jF/gcAAIBm5O7/XdzSyf6ftP+/MSrsi+n/4x+1/n/x/b/n/+v/9f/6/1nR/w/T/4/Q/+v/9f/6fyY1t/4/d//v45ZO9j8AAAD0IHf/H+IW+x8AAACakbv/j3GL/Q8AAADNyN3/p7ilk/3v+f/6f/2//l//v/n19f/LpP8fpv/frP6g9P/6f/2//p9Jza3/z93/57ilk/0PAAAAPcjd/5e4xf4HAACAZuTuvyVusf8BAACgGbn7/xq3dLL/9f/6f/2//l//v/n19f/LNKv+/5j+/8LPvev/j7+s5/9vvf/Pt6D/1//r/5nE3Pr/3P1/i1s62f8AAADQg9z9f49b7H8AAABoRu7+f8Qt9j8AAAA0I3f/P+OWTvb/SP9/on6j/n+Q/n/3+9f/b/7+0P/r//X/h29W/b/n/y/m+f9F/+/5//p//T+Tmlv/n7v/X3FLJ/sfAAAAepC7/9a4xf4HAACAZuTu/3fcYv8DAABAM3L3/ydu6WT/e/7/kvr/a/T/+n/9v/5f/z9C/z9M/z9C/6//v4T3f/Wej/X/+n/Wza3/z93/3wAAAP//tmNCRw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xc0, 0x0, 0x0, 0x0, 0x3})

1m43.349034966s ago: executing program 3 (id=1403):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r0, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000000000000008001d0040000000", 0x24)

1m43.178000599s ago: executing program 3 (id=1406):
unshare(0x22020400)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x3c1a02, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8)

1m42.924875505s ago: executing program 3 (id=1417):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/204, 0xcc}], 0x1, 0x6, 0x3)

1m42.486564713s ago: executing program 3 (id=1418):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$eJzs3c1uElEUAOAzLS1gXHRnYmIyxoWuGvUJakxNjCQmNSx010RWnVXZQDftY/gKvoxP4QOYrrrQjKkzAy1QpA0/Qb9vw2HOPZd7mTDMhkMehe8PvkSjkcTGXuzFRRI7sRGVsxhVGzsCAKyPizyPH3nh9tXuAwBgHc3w/f9ryUsCABbsw8dP7161WvsHadqIOD/rtXvt4rHIv3nb2n+e/rEzrDrv9dqbg/yLdPTe4TK/FffK/MuiPh2ktyOivR3PnhT5y9zr9630en09Pk9Zd3NO+wcAAAAAAAAAAAAAAAAAAAAAgFV4FGllYn+f3d3RfLPMF8+u9Aca6d9Ti4dVe+Bhe6D8dBmbAgAAAAAAAAAAAAAAAAAAgDXT7Z8cHWZZ53gY1CNicGQn69QmjLk5SMqJZxo8U5DMaZ6JwUbcrbxZbjPLOt9+3q48Kd+iRWxnGDQnn9xZgqgtcmHLCNJ5TVivTvN4qhnJlPI8vwyufwqiDKq2GDeWb0fE9IU9Pbjrvi7yPM++Pj7u9iOfOnh4jagv7WoEAAAAAAAAAAAAAAAAAAD/tyu/+h7T2FzFigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg+br9k+pf/k+ODrOsc9ztzxycRsT9+Ovg6rW2orG6jQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBP+x0AAP//JtMcXQ==")
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E'])
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}]})

1m42.266716087s ago: executing program 3 (id=1423):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/195, 0xc3)

1m41.949344093s ago: executing program 3 (id=1426):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r0, &(0x7f0000000080)="240000001a005f0400f9f407000904018020200000200000000000000800030000000000", 0x24)

1m41.518587332s ago: executing program 33 (id=1426):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r0, &(0x7f0000000080)="240000001a005f0400f9f407000904018020200000200000000000000800030000000000", 0x24)

3.103267659s ago: executing program 2 (id=2313):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="740000006d00010028bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="060c000041000000540034801400350062617461647630"], 0x74}}, 0x0)

2.903014433s ago: executing program 2 (id=2317):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000680)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x5}})

1.595362169s ago: executing program 4 (id=2326):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19)
write(r0, &(0x7f0000000040)="11fa", 0x2)

1.303251555s ago: executing program 4 (id=2327):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000000400))

1.135377968s ago: executing program 5 (id=2329):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="62042700ffff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x4008000)

1.064760629s ago: executing program 4 (id=2330):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
getegid()

1.02520214s ago: executing program 5 (id=2332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000640000000030800054000000003080001400000000008000240000000020900010073797a30000000000900020073797a32"], 0xac}}, 0x0)

875.606913ms ago: executing program 2 (id=2333):
setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa})
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil)

807.651284ms ago: executing program 5 (id=2335):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10)
r0 = openat$capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$CAPI_INSTALLED(r0, 0x80024322)

775.903465ms ago: executing program 4 (id=2336):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}]}]}], {0x14}}, 0x29c}}, 0x4048010)

720.737346ms ago: executing program 0 (id=2337):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x171, &(0x7f0000000480)="$eJzs2rFKw0AYB/DParEUn8Cp0Ax1aJMmWgV3QXDyAcTQ3tXQxEgiSDsFX0BxiI/g6qqbj9DZzU1dXB0kkvRq2zsXCxLB/29o/vTLfXcJ4aarB77X5GGdaC262n8uBL5XaVmbbd7kNo3sElElDcMkuW6Q4vCrPkyihnJD9V5ca9147447LjPVHgAAAAAAAAAAAAAAAAAAAAAA/0T1RYTyUezfcMdlzalq2B/0bNdlQTj+RyNxRod47G9zR2PWTL/aO5GWnd9x4p3ztJ8xU9fSTqUk80byfPqpd6KH/UHd8ewu67Jj07RaxrphbJh61kuXO2qXYk1EpfRnQXo+7XZynujRUM8TUXl0WVp14ouzrHtRfv4CBZMX8YMQzTUKIcdAEdEfWIYIT69E35dK4gNlQVic/lYXR/dsHWSlnBb/keT/6n47yPsHdZat6kO6fzTavttR9k8pjEfPM3lBjO3ZK+kUyo4GkJPPAAAA///+VynD")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/101, 0x65)

647.064047ms ago: executing program 5 (id=2338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

615.997578ms ago: executing program 0 (id=2339):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r1, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)

580.128529ms ago: executing program 2 (id=2340):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r0, &(0x7f0000000580)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)

579.294339ms ago: executing program 4 (id=2341):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x10, 0x4)
sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xcb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="a7", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)=']', 0x1}], 0x1}}], 0x2, 0x200400c0)

447.340121ms ago: executing program 0 (id=2342):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)

447.136671ms ago: executing program 5 (id=2343):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0)

423.428392ms ago: executing program 2 (id=2344):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0x7, 0xd654, 0x101}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x3}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

341.462004ms ago: executing program 4 (id=2345):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

276.126425ms ago: executing program 5 (id=2346):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81, 0x43094}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

269.582645ms ago: executing program 0 (id=2347):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x39}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

118.705728ms ago: executing program 2 (id=2348):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38)

118.463188ms ago: executing program 0 (id=2349):
unshare(0x4000400)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4, @empty}, 0x10)

0s ago: executing program 0 (id=2350):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xc8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xc8}}, 0x0)

kernel console output (not intermixed with test programs):

or=056a, idProduct=0027, bcdDevice= 0.00
[  242.763785][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.774770][ T5879] usb 5-1: config 0 descriptor??
[  243.184266][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1217'.
[  243.236485][ T5879] wacom 0003:056A:0027.0012: ignoring exceeding usage max
[  243.258197][ T5879] wacom 0003:056A:0027.0012: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  243.273032][ T5879] wacom 0003:056A:0027.0012: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.4-1/input0
[  243.305162][ T5879] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0027.0012/input/input33
[  243.424764][ T5879] usb 5-1: USB disconnect, device number 7
[  243.505899][ T9129] fido_id[9129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  244.209175][ T9141] loop3: detected capacity change from 0 to 2048
[  244.248767][ T9141] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  244.270562][ T9141] NILFS (loop3): mounting unchecked fs
[  244.302592][ T9141] NILFS (loop3): recovery complete
[  244.328344][ T9146] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.571343][ T9151] loop4: detected capacity change from 0 to 128
[  244.634116][ T9151] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  244.695052][ T9151] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  244.809136][ T7467] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  245.027368][ T9167] hub 8-0:1.0: USB hub found
[  245.032311][ T9167] hub 8-0:1.0: 1 port detected
[  245.556350][ T5858] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  245.770476][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.781730][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.792501][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  245.806326][ T5858] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  245.815644][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.831987][ T5858] usb 3-1: config 0 descriptor??
[  246.278505][ T5858] wacom 0003:056A:0027.0013: ignoring exceeding usage max
[  246.329292][ T5858] wacom 0003:056A:0027.0013: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  246.359860][ T5858] wacom 0003:056A:0027.0013: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0
[  246.409196][ T5858] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.0013/input/input36
[  246.576039][ T5858] usb 3-1: USB disconnect, device number 12
[  246.815372][ T9194] hub 8-0:1.0: USB hub found
[  246.820758][ T9194] hub 8-0:1.0: 1 port detected
[  246.932415][ T9186] loop3: detected capacity change from 0 to 32768
[  246.964772][ T9186] JBD2: Ignoring recovery information on journal
[  247.000248][ T9186] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  247.078335][ T5787] ocfs2: Unmounting device (7,3) on (node local)
[  248.290331][ T5858] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  248.374989][ T5854] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  248.507877][ T5858] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  248.518671][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.527512][ T5858] usb 4-1: Product: syz
[  248.531858][ T5858] usb 4-1: Manufacturer: syz
[  248.537348][ T5858] usb 4-1: SerialNumber: syz
[  248.547691][ T5858] usb 4-1: config 0 descriptor??
[  248.566858][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.602933][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.621792][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  248.655784][ T5854] usb 5-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  248.671278][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.690623][ T5854] usb 5-1: config 0 descriptor??
[  248.810679][ T5879] usb 4-1: USB disconnect, device number 8
[  249.141350][ T5854] wacom 0003:056A:0027.0014: ignoring exceeding usage max
[  249.155728][ T5854] wacom 0003:056A:0027.0014: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  249.182959][ T5854] wacom 0003:056A:0027.0014: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.4-1/input0
[  249.207523][ T5854] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0027.0014/input/input39
[  249.458427][ T5879] usb 5-1: USB disconnect, device number 8
[  250.195097][ T9249] loop3: detected capacity change from 0 to 40427
[  250.218386][ T9249] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  250.243405][ T9249] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  250.294743][ T9249] F2FS-fs (loop3): Found nat_bits in checkpoint
[  250.385473][ T5879] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  250.447685][ T9249] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  250.465451][ T9249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  250.583004][ T5879] usb 3-1: Using ep0 maxpacket: 16
[  250.603654][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.627563][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.640389][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  250.640640][ T5787] syz-executor: attempt to access beyond end of device
[  250.640640][ T5787] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  250.654340][ T5879] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  250.677186][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.695173][ T5879] usb 3-1: config 0 descriptor??
[  250.713418][ T5787] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  250.743884][   T27] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  250.928204][   T27] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  250.944906][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.959651][   T27] usb 5-1: Product: syz
[  250.965021][   T27] usb 5-1: Manufacturer: syz
[  250.969665][   T27] usb 5-1: SerialNumber: syz
[  250.991158][   T27] usb 5-1: config 0 descriptor??
[  251.129416][ T5879] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  251.167068][ T5879] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max
[  251.207370][ T5879] microsoft 0003:045E:07DA.0015: implement() called with n (56) > 32! (kworker/0:6)
[  251.290682][   T27] usb 5-1: USB disconnect, device number 9
[  251.315811][ T5879] microsoft 0003:045E:07DA.0015: No inputs registered, leaving
[  251.340104][ T5879] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  251.373463][ T5879] microsoft 0003:045E:07DA.0015: no inputs found
[  251.383852][ T5879] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway
[  251.431053][ T5879] usb 3-1: USB disconnect, device number 13
[  251.529761][ T9277] fido_id[9277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  252.083463][ T9295] loop4: detected capacity change from 0 to 256
[  252.101186][ T9295] exfat: Deprecated parameter 'utf8'
[  252.131452][ T9295] exfat: Deprecated parameter 'namecase'
[  252.172981][ T9295] exfat: Deprecated parameter 'utf8'
[  252.228581][ T9295] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  252.842829][ T5854] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  253.049416][ T5854] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  253.079950][ T9325] sp0: Synchronizing with TNC
[  253.084968][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.101770][ T5854] usb 3-1: Product: syz
[  253.108851][ T5854] usb 3-1: Manufacturer: syz
[  253.118143][ T5854] usb 3-1: SerialNumber: syz
[  253.128999][ T9303] loop3: detected capacity change from 0 to 32768
[  253.143804][ T5854] usb 3-1: config 0 descriptor??
[  253.163839][ T9303] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  253.172506][ T9303] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  253.382907][ T9303] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  253.419953][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  253.438617][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  253.496149][ T5777] usb 3-1: USB disconnect, device number 14
[  253.624370][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 185ms
[  253.653984][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done
[  253.661475][ T9303] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  254.022304][ T5854] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  254.074701][ T9303] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[  254.074701][ T9303]   bh = 2049 (type: exp=14, found=8)
[  254.074701][ T9303]   function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1417
[  254.102095][ T9303] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  254.109808][ T9303] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  254.139207][ T9303] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  254.150812][ T9303] gfs2: fsid=syz:syz.0: File system withdrawn
[  254.158900][ T9303] CPU: 0 PID: 9303 Comm: syz.3.1301 Not tainted syzkaller #0
[  254.166337][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  254.176447][ T9303] Call Trace:
[  254.179765][ T9303]  <TASK>
[  254.182749][ T9303]  dump_stack_lvl+0x16c/0x230
[  254.187524][ T9303]  ? kobject_uevent_env+0x363/0x8c0
[  254.192764][ T9303]  ? show_regs_print_info+0x20/0x20
[  254.198014][ T9303]  ? load_image+0x3b0/0x3b0
[  254.202568][ T9303]  ? kobject_uevent_env+0x363/0x8c0
[  254.207820][ T9303]  gfs2_withdraw+0xe50/0x13b0
[  254.212564][ T9303]  ? gfs2_lm+0x220/0x220
[  254.216869][ T9303]  ? __wait_on_bit+0x2d0/0x2d0
[  254.221700][ T9303]  ? bit_waitqueue+0x30/0x30
[  254.226443][ T9303]  gfs2_metatype_check_ii+0x78/0x90
[  254.231698][ T9303]  gfs2_quota_init+0xc85/0xe80
[  254.236578][ T9303]  ? qd_put+0x1a0/0x1a0
[  254.240806][ T9303]  ? inode_go_inval+0x12d/0x2b0
[  254.245722][ T9303]  gfs2_make_fs_rw+0x3f5/0x530
[  254.250546][ T9303]  ? gfs2_jdesc_check+0x2a0/0x2a0
[  254.255608][ T9303]  ? do_raw_spin_lock+0x121/0x2c0
[  254.260682][ T9303]  ? __rwlock_init+0x150/0x150
[  254.265503][ T9303]  ? do_raw_spin_unlock+0x121/0x230
[  254.265900][ T5854] usb 5-1: Using ep0 maxpacket: 8
[  254.270765][ T9303]  gfs2_reconfigure+0x612/0xb10
[  254.280837][ T9303]  reconfigure_super+0x21e/0x880
[  254.285844][ T9303]  vfs_fsconfig_locked+0x16c/0x320
[  254.289670][ T5854] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  254.290995][ T9303]  __se_sys_fsconfig+0x700/0x850
[  254.300413][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.304967][ T9303]  ? __x64_sys_fsconfig+0xc0/0xc0
[  254.305013][ T9303]  ? lockdep_hardirqs_on+0x98/0x150
[  254.323328][ T9303]  ? __x64_sys_fsconfig+0x20/0xc0
[  254.328410][ T9303]  do_syscall_64+0x55/0xb0
[  254.331905][ T5854] usb 5-1: Product: syz
[  254.332966][ T9303]  ? clear_bhb_loop+0x40/0x90
[  254.341875][ T9303]  ? clear_bhb_loop+0x40/0x90
[  254.341900][ T5854] usb 5-1: Manufacturer: syz
[  254.346589][ T9303]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  254.357156][ T9303] RIP: 0033:0x7fdf58b8ec29
[  254.361531][ T5854] usb 5-1: SerialNumber: syz
[  254.361612][ T9303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.385996][ T9303] RSP: 002b:00007fdf5994e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  254.394458][ T9303] RAX: ffffffffffffffda RBX: 00007fdf58dd5fa0 RCX: 00007fdf58b8ec29
[  254.402472][ T9303] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004
[  254.410487][ T9303] RBP: 00007fdf58c11e41 R08: 0000000000000000 R09: 0000000000000000
[  254.418511][ T9303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.426526][ T9303] R13: 00007fdf58dd6038 R14: 00007fdf58dd5fa0 R15: 00007ffd8fce49f8
[  254.434564][ T9303]  </TASK>
[  254.445468][ T5854] usb 5-1: config 0 descriptor??
[  254.464519][ T5854] gspca_main: se401-2.14.0 probing 047d:5003
[  255.261597][ T5879] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  255.364140][ T5854] usb 5-1: reset high-speed USB device number 10 using dummy_hcd
[  255.449407][ T5879] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  255.458635][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.468941][ T5879] usb 3-1: Product: syz
[  255.473344][ T5879] usb 3-1: Manufacturer: syz
[  255.477980][ T5879] usb 3-1: SerialNumber: syz
[  255.484808][ T5879] usb 3-1: config 0 descriptor??
[  255.729896][ T5879] usb 3-1: USB disconnect, device number 15
[  255.780848][ T5854] gspca_se401: read req failed req 0x06 error -71
[  255.793733][ T5854] se401: probe of 5-1:0.0 failed with error -71
[  255.808669][ T5854] usb 5-1: USB disconnect, device number 10
[  256.257633][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  256.264252][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  256.347118][ T9369] loop3: detected capacity change from 0 to 128
[  256.403200][ T9369] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  256.451149][ T9369] hpfs: filesystem error: improperly stopped
[  256.457232][ T9369] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  256.499244][ T9369] hpfs: You really don't want any checks? You are crazy...
[  256.512360][ T9369] hpfs: hpfs_map_sector(): read error
[  256.517808][ T9369] hpfs: code page support is disabled
[  256.521100][ T9375] netlink: 'syz.0.1333': attribute type 5 has an invalid length.
[  256.562523][ T9369] hpfs: hpfs_map_4sectors(): unaligned read
[  256.569208][ T9369] hpfs: hpfs_map_4sectors(): unaligned read
[  256.601009][ T9369] hpfs: filesystem error: unable to find root dir
[  256.745375][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  257.104346][ T9387] loop3: detected capacity change from 0 to 512
[  257.131413][ T9387] EXT4-fs: Ignoring removed mblk_io_submit option
[  257.145471][ T9389] tipc: Started in network mode
[  257.150714][ T9387] EXT4-fs: Ignoring removed mblk_io_submit option
[  257.152317][ T9389] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[  257.178918][ T9387] EXT4-fs (loop3): Test dummy encryption mode enabled
[  257.181327][ T9389] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  257.185886][ T9387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  257.206060][ T5858] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  257.248544][ T9387] EXT4-fs (loop3): 1 truncate cleaned up
[  257.281536][ T9387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.393367][ T5858] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  257.405122][ T5858] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  257.415528][ T5858] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  257.426458][ T5858] usb 1-1: config 220 has no interface number 2
[  257.435199][ T5858] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  257.469645][ T5858] usb 1-1: config 220 interface 0 has no altsetting 0
[  257.479780][ T5858] usb 1-1: config 220 interface 76 has no altsetting 0
[  257.497313][ T5858] usb 1-1: config 220 interface 1 has no altsetting 0
[  257.517269][ T5858] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  257.527143][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.536619][ T5858] usb 1-1: Product: syz
[  257.550333][ T5858] usb 1-1: Manufacturer: syz
[  257.555224][ T5858] usb 1-1: SerialNumber: syz
[  257.630621][   T27] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  257.647150][ T9387] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  257.694745][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.807257][ T5858] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  257.820378][   T27] usb 5-1: Using ep0 maxpacket: 8
[  257.826367][ T5858] usb 1-1: No valid video chain found.
[  257.832612][ T5858] usb 1-1: selecting invalid altsetting 0
[  257.842977][   T27] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  257.856137][   T27] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  257.869063][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.879215][ T5858] usb 1-1: selecting invalid altsetting 0
[  257.888109][   T27] usb 5-1: Product: syz
[  257.898446][ T5858] usbtest: probe of 1-1:220.1 failed with error -22
[  257.906099][   T27] usb 5-1: Manufacturer: syz
[  257.911309][   T27] usb 5-1: SerialNumber: syz
[  257.940556][ T5858] usb 1-1: USB disconnect, device number 11
[  257.952007][   T27] usb 5-1: config 0 descriptor??
[  257.981135][   T27] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  258.007084][   T27] usb 5-1: setting power ON
[  258.020570][   T27] dvb-usb: bulk message failed: -22 (2/0)
[  258.041751][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  258.078584][   T27] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  258.097618][   T27] usb 5-1: media controller created
[  258.142443][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  258.180621][ T9395] dvb-usb: bulk message failed: -22 (3/0)
[  258.201625][ T9395] cxusb: i2c wr: len=78 is too big!
[  258.201625][ T9395] 
[  258.221584][   T27] usb 5-1: selecting invalid altsetting 6
[  258.235391][   T27] usb 5-1: digital interface selection failed (-22)
[  258.248656][   T27] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  258.269162][   T27] usb 5-1: setting power OFF
[  258.280027][   T27] dvb-usb: bulk message failed: -22 (2/0)
[  258.291109][   T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  258.308392][   T27] (NULL device *): no alternate interface
[  258.348099][ T9411] rdma_op ffff88805d5161f0 conn xmit_rdma 0000000000000000
[  258.404147][   T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  258.457341][   T27] usb 5-1: USB disconnect, device number 11
[  258.528355][ T9414] team0: Device ip6tnl1 is of different type
[  258.537285][ T9415] netlink: 'syz.3.1348': attribute type 3 has an invalid length.
[  258.880758][ T9422] ubi31: attaching mtd0
[  259.037668][ T9431] loop3: detected capacity change from 0 to 512
[  259.767716][ T9427] loop4: detected capacity change from 0 to 32768
[  259.822571][ T9427] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  259.845888][ T9453] loop3: detected capacity change from 0 to 4096
[  259.856058][ T9427] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  259.922391][ T9427] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  260.004243][ T9427] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  260.151377][ T9453] ntfs3: loop3: failed to convert "0000" to iso8859-2
[  260.250223][ T5777] kernel read not supported for file /dsp (pid: 5777 comm: kworker/0:3)
[  261.580669][ T9469] loop4: detected capacity change from 0 to 32768
[  261.603284][ T9469] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  261.614497][ T9469] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  261.655243][ T9469] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  261.795819][ T9469] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  262.130768][ T9510] loop4: detected capacity change from 0 to 4096
[  262.214807][   T27] kernel read not supported for file /dsp (pid: 27 comm: kworker/1:1)
[  262.235697][ T9510] ntfs3: loop4: failed to convert "0000" to iso8859-2
[  262.431723][ T9514] team0: Device ip6tnl1 is of different type
[  262.449545][ T9516] netlink: 'syz.4.1392': attribute type 3 has an invalid length.
[  263.193070][ T9526] loop4: detected capacity change from 0 to 8192
[  263.261579][ T9526] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  263.300654][ T9526] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  263.320873][ T9526] REISERFS (device loop4): using ordered data mode
[  263.331598][ T9526] reiserfs: using flush barriers
[  263.341420][ T9526] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  263.408054][ T9526] REISERFS (device loop4): checking transaction log (loop4)
[  263.446519][ T9526] REISERFS (device loop4): Using r5 hash to sort names
[  263.470213][ T9526] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  263.848968][ T9535] netlink: 'syz.3.1403': attribute type 29 has an invalid length.
[  263.862460][ T9537] ubi31: attaching mtd0
[  264.681539][ T9570] loop3: detected capacity change from 0 to 256
[  264.756243][ T9570] tmpfs: Cannot retroactively limit inodes
[  264.824867][ T9576] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  264.846792][   T27] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  265.041033][   T27] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  265.056607][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.064768][   T27] usb 5-1: Product: syz
[  265.081315][   T27] usb 5-1: Manufacturer: syz
[  265.085977][   T27] usb 5-1: SerialNumber: syz
[  265.103706][   T27] usb 5-1: config 0 descriptor??
[  265.213433][ T2905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.384667][ T2905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.504894][ T2905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.618646][ T2905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.745820][   T27] usb 5-1: Firmware version (0.0) predates our first public release.
[  265.767096][   T27] usb 5-1: Please update to version 0.2 or newer
[  265.894016][   T27] usb 5-1: USB disconnect, device number 12
[  266.274642][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  266.291585][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  266.302759][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  266.321711][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  266.330806][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  266.338728][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  266.950465][ T9589] chnl_net:caif_netlink_parms(): no params data found
[  267.141077][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.148536][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.159255][ T9589] bridge_slave_0: entered allmulticast mode
[  267.166766][ T9589] bridge_slave_0: entered promiscuous mode
[  267.198948][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.206278][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.213569][ T9589] bridge_slave_1: entered allmulticast mode
[  267.223021][ T9589] bridge_slave_1: entered promiscuous mode
[  267.262684][ T9589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.294743][ T9589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.356336][ T9589] team0: Port device team_slave_0 added
[  267.392928][ T9589] team0: Port device team_slave_1 added
[  267.434148][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.441267][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.480945][ T9589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.508656][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.525202][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.562066][ T9589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.699995][ T2905] hsr_slave_0: left promiscuous mode
[  267.711696][ T2905] hsr_slave_1: left promiscuous mode
[  267.719708][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.727466][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.741075][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.753198][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.762571][ T2905] bridge_slave_1: left allmulticast mode
[  267.773473][ T2905] bridge_slave_1: left promiscuous mode
[  267.783616][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.801345][ T2905] bridge_slave_0: left allmulticast mode
[  267.811586][ T2905] bridge_slave_0: left promiscuous mode
[  267.821278][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.879846][ T2905] veth1_macvtap: left promiscuous mode
[  267.889166][ T2905] veth0_macvtap: left promiscuous mode
[  267.894902][ T2905] veth1_vlan: left promiscuous mode
[  267.906670][ T2905] veth0_vlan: left promiscuous mode
[  268.405045][ T5800] Bluetooth: hci0: command tx timeout
[  268.648666][ T2905] team0 (unregistering): Port device team_slave_1 removed
[  268.706863][ T2905] team0 (unregistering): Port device team_slave_0 removed
[  268.761195][ T2905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.817423][ T2905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.414153][ T2905] bond0 (unregistering): Released all slaves
[  269.590518][ T9589] hsr_slave_0: entered promiscuous mode
[  269.599157][ T9589] hsr_slave_1: entered promiscuous mode
[  269.940073][ T9589] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  269.954713][ T9589] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  269.981178][ T9589] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  269.996016][ T9589] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  270.119375][ T9589] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.153168][ T9589] 8021q: adding VLAN 0 to HW filter on device team0
[  270.176123][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.183336][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.211246][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.218527][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.484108][ T5800] Bluetooth: hci0: command tx timeout
[  270.528146][ T9589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.993592][ T9589] veth0_vlan: entered promiscuous mode
[  271.023346][ T9589] veth1_vlan: entered promiscuous mode
[  271.087148][ T9589] veth0_macvtap: entered promiscuous mode
[  271.100345][ T9589] veth1_macvtap: entered promiscuous mode
[  271.133347][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.144203][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.154942][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.167914][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.178133][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.189038][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.201219][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.245628][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.256335][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.268134][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.280131][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.290098][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.300647][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.313314][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.326176][ T9589] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.335270][ T9589] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.344328][ T9589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.353046][ T9589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.469304][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.483000][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.527454][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.538892][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.123325][ T9689] loop5: detected capacity change from 0 to 4096
[  272.362606][ T9689] ntfs3: loop5: failed to convert "0000" to iso8859-2
[  272.571972][ T5800] Bluetooth: hci0: command tx timeout
[  274.199370][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  274.246950][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  274.642254][ T5800] Bluetooth: hci0: command tx timeout
[  274.846082][ T9772] loop4: detected capacity change from 0 to 4096
[  274.873117][ T9772] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  274.984937][ T9772] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  275.019761][ T9772] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  275.061616][ T9772] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  275.106538][ T9772] ntfs: volume version 3.1.
[  275.376110][ T7467] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  277.580558][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  277.812549][    T8] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  277.839137][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.865369][    T8] usb 3-1: Product: syz
[  277.869612][    T8] usb 3-1: Manufacturer: syz
[  277.889468][    T8] usb 3-1: SerialNumber: syz
[  277.907689][    T8] usb 3-1: config 0 descriptor??
[  277.980450][ T5858] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  278.100158][ T5854] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  278.172467][ T5858] usb 1-1: config 0 has an invalid interface number: 112 but max is 0
[  278.186068][ T5858] usb 1-1: config 0 has no interface number 0
[  278.198786][ T5858] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  278.215729][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.227442][ T5858] usb 1-1: Product: syz
[  278.236316][ T5858] usb 1-1: Manufacturer: syz
[  278.241901][ T5858] usb 1-1: SerialNumber: syz
[  278.257633][ T5858] usb 1-1: config 0 descriptor??
[  278.300542][ T5858] mvusb_mdio: probe of 1-1:0.112 failed with error -5
[  278.313786][ T5854] usb 5-1: Using ep0 maxpacket: 32
[  278.323902][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.351514][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.391823][ T5854] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00
[  278.404401][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.434123][ T5854] usb 5-1: config 0 descriptor??
[  278.539292][ T5858] usb 1-1: USB disconnect, device number 12
[  278.551632][    T8] usb 3-1: Firmware version (0.0) predates our first public release.
[  278.576830][    T8] usb 3-1: Please update to version 0.2 or newer
[  278.692435][    T8] usb 3-1: USB disconnect, device number 16
[  278.881612][ T5854] aquacomputer_d5next 0003:0C70:F00A.0016: unknown main item tag 0x7
[  278.913640][ T5854] aquacomputer_d5next 0003:0C70:F00A.0016: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.4-1/input0
[  279.095974][ T9887] Invalid ELF header magic: != ELF
[  279.145514][    T9] usb 5-1: USB disconnect, device number 13
[  279.397433][ T9895] ieee802154 phy0 wpan0: encryption failed: -22
[  279.444279][ T9895] ieee802154 phy0 wpan0: encryption failed: -22
[  279.935990][ T9893] loop5: detected capacity change from 0 to 32768
[  279.943616][ T9893] XFS: ikeep mount option is deprecated.
[  280.042955][ T9893] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.366231][ T9893] XFS (loop5): Ending clean mount
[  280.387098][ T9893] XFS (loop5): Quotacheck needed: Please wait.
[  280.454476][ T9893] XFS (loop5): Quotacheck: Done.
[  280.534535][ T9589] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.559528][ T5854] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  280.758790][ T5854] usb 3-1: Using ep0 maxpacket: 8
[  280.772768][ T5854] usb 3-1: unable to get BOS descriptor or descriptor too short
[  280.796280][ T5854] usb 3-1: config 4 has an invalid interface number: 30 but max is 0
[  280.815223][ T5854] usb 3-1: config 4 has no interface number 0
[  280.841966][ T5854] usb 3-1: config 4 interface 30 has no altsetting 0
[  280.855605][ T9934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1518'.
[  280.868720][ T5854] usb 3-1: string descriptor 0 read error: -22
[  280.875236][ T5854] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  280.904719][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.962276][ T5854] dw2102: su3000_identify_state
[  280.977476][ T5854] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  280.988389][ T5854] dw2102: su3000_power_ctrl: 1, initialized 0
[  280.998948][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1517'.
[  281.002016][ T5854] dvb-usb: bulk message failed: -22 (2/0)
[  281.024279][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1517'.
[  281.046755][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  281.059172][ T9936] netlink: 'syz.5.1517': attribute type 11 has an invalid length.
[  281.067717][ T5854] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  281.076491][ T5854] usb 3-1: media controller created
[  281.092558][ T5854] dvb-usb: bulk message failed: -22 (6/0)
[  281.098415][ T5854] dw2102: i2c transfer failed.
[  281.121485][ T5854] dvb-usb: bulk message failed: -22 (6/0)
[  281.133960][ T5854] dw2102: i2c transfer failed.
[  281.148535][ T5854] dvb-usb: bulk message failed: -22 (6/0)
[  281.158918][ T5854] dw2102: i2c transfer failed.
[  281.163765][ T5854] dvb-usb: bulk message failed: -22 (6/0)
[  281.173791][ T9938] vivid-003: disconnect
[  281.179557][ T5854] dw2102: i2c transfer failed.
[  281.188323][ T9925] dvb-usb: bulk message failed: -22 (3/0)
[  281.195247][ T9937] vivid-003: reconnect
[  281.205574][ T9925] dw2102: i2c transfer failed.
[  281.228607][ T9925] dvb-usb: bulk message failed: -22 (4/0)
[  281.239222][ T9925] dw2102: i2c transfer failed.
[  281.244817][ T5854] dvb-usb: bulk message failed: -22 (6/0)
[  281.267707][ T5854] dw2102: i2c transfer failed.
[  281.276165][ T5854] dvb-usb: bulk message failed: -22 (6/0)
[  281.294746][ T5854] dw2102: i2c transfer failed.
[  281.318456][ T5854] dvb-usb: MAC address: 02:02:02:02:02:02
[  281.373706][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  281.419498][ T5854] dvb-usb: bulk message failed: -22 (3/0)
[  281.428351][ T5854] dw2102: command 0x0e transfer failed.
[  281.433959][ T5854] dvb-usb: bulk message failed: -22 (3/0)
[  281.463283][ T5854] dw2102: command 0x0e transfer failed.
[  281.795162][   T28] audit: type=1326 audit(1758301757.879:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243a38ec29 code=0x7ffc0000
[  281.818185][ T5854] dvb-usb: bulk message failed: -22 (3/0)
[  281.828636][ T5854] dw2102: command 0x0e transfer failed.
[  281.844013][   T28] audit: type=1326 audit(1758301757.879:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243a38ec29 code=0x7ffc0000
[  281.868831][ T5854] dvb-usb: bulk message failed: -22 (3/0)
[  281.869204][   T28] audit: type=1326 audit(1758301757.919:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f243a38ec29 code=0x7ffc0000
[  281.874796][ T5854] dw2102: command 0x0e transfer failed.
[  281.897854][   T28] audit: type=1326 audit(1758301757.919:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243a38ec29 code=0x7ffc0000
[  281.971753][ T5854] dvb-usb: bulk message failed: -22 (1/0)
[  281.999465][ T5854] dw2102: command 0x51 transfer failed.
[  282.005513][ T5854] dvb-usb: bulk message failed: -22 (5/0)
[  282.008075][   T28] audit: type=1326 audit(1758301757.919:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243a38ec29 code=0x7ffc0000
[  282.048592][ T5854] dw2102: i2c probe for address 0x68 failed.
[  282.066436][ T5854] dvb-usb: bulk message failed: -22 (5/0)
[  282.088315][ T5854] dw2102: i2c probe for address 0x69 failed.
[  282.094388][ T5854] dvb-usb: bulk message failed: -22 (5/0)
[  282.098062][   T28] audit: type=1326 audit(1758301757.929:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f243a38ec29 code=0x7ffc0000
[  282.148199][ T5854] dw2102: i2c probe for address 0x6a failed.
[  282.154268][ T5854] dw2102: probing for demodulator failed. Is the external power switched on?
[  282.166060][   T28] audit: type=1326 audit(1758301757.929:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f243a38ec63 code=0x7ffc0000
[  282.205608][ T5854] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  282.228748][   T28] audit: type=1326 audit(1758301757.929:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f243a38d6df code=0x7ffc0000
[  282.305611][ T9964] loop4: detected capacity change from 0 to 2048
[  282.333518][   T28] audit: type=1326 audit(1758301758.019:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f243a38ecb7 code=0x7ffc0000
[  282.382876][   T28] audit: type=1326 audit(1758301758.019:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f243a38d590 code=0x7ffc0000
[  282.417975][ T5854] rc_core: IR keymap rc-tt-1500 not found
[  282.433470][ T5854] Registered IR keymap rc-empty
[  282.442797][ T9964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.470827][ T5854] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  282.513523][ T9964] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.548030][ T5854] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input42
[  282.611471][ T5854] dvb-usb: schedule remote query interval to 250 msecs.
[  282.630062][ T5854] dw2102: su3000_power_ctrl: 0, initialized 1
[  282.645146][ T5854] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  282.666753][ T5854] usb 3-1: USB disconnect, device number 17
[  282.763187][ T7467] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.903248][ T5854] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  283.447509][ T5777] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  283.651547][ T5777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.674671][ T5777] usb 5-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00
[  283.692558][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.723383][ T5777] usb 5-1: config 0 descriptor??
[  284.066815][T10010] loop5: detected capacity change from 0 to 512
[  284.142497][T10010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.180609][ T5777] wacom 0003:056A:0015.0017: Unknown device_type for 'HID 056a:0015'. Assuming pen.
[  284.194826][ T5777] wacom 0003:056A:0015.0017: hidraw0: USB HID v9.14 Device [HID 056a:0015] on usb-dummy_hcd.4-1/input0
[  284.211282][ T5777] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0015.0017/input/input43
[  284.222893][T10010] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.525212][ T5777] usb 5-1: USB disconnect, device number 14
[  284.581518][ T9589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.943797][T10034] netlink: 'syz.5.1559': attribute type 4 has an invalid length.
[  284.974764][T10034] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1559'.
[  285.411766][T10047] loop5: detected capacity change from 0 to 8192
[  285.466422][T10047] FAT-fs (loop5): Unrecognized mount option "ÿ]µLî+AX²k÷KÚ" or missing value
[  285.504579][T10052] sp0: Synchronizing with TNC
[  285.568825][T10051] [U] è`
[  286.480441][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'.
[  287.275589][ T5777] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  287.475920][ T5777] usb 6-1: Using ep0 maxpacket: 16
[  287.487232][ T5777] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  287.500756][ T5777] usb 6-1: config 0 has no interface number 0
[  287.512670][ T5777] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.532292][ T5777] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.548752][ T5777] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  287.578322][ T5777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.604580][ T5777] usb 6-1: config 0 descriptor??
[  287.719792][T10113] netlink: 'syz.0.1593': attribute type 4 has an invalid length.
[  287.765641][T10113] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1593'.
[  288.028940][T10120] loop4: detected capacity change from 0 to 128
[  288.052420][ T5777] uclogic 0003:5543:0781.0018: unknown main item tag 0x0
[  288.081319][ T5777] uclogic 0003:5543:0781.0018: unknown main item tag 0x0
[  288.090664][ T5777] uclogic 0003:5543:0781.0018: unknown main item tag 0x0
[  288.106074][T10120] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  288.131375][ T5777] uclogic 0003:5543:0781.0018: unknown main item tag 0x0
[  288.161756][ T5777] uclogic 0003:5543:0781.0018: unknown main item tag 0x0
[  288.169744][T10120] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.195431][ T5777] uclogic 0003:5543:0781.0018: No inputs registered, leaving
[  288.250555][ T5777] uclogic 0003:5543:0781.0018: hidraw0: USB HID v0.40 Device [HID 5543:0781] on usb-dummy_hcd.5-1/input1
[  288.319436][ T5777] usb 6-1: USB disconnect, device number 2
[  288.404382][ T7467] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  288.473173][T10124] fido_id[10124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  289.515169][T10168] loop5: detected capacity change from 0 to 22
[  289.540581][T10168] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  289.576926][T10168] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  291.164276][T10221] netlink: 'syz.4.1628': attribute type 1 has an invalid length.
[  291.254387][ T5854] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  291.476990][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  291.493349][ T5854] usb 6-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[  291.515107][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.534849][ T5854] usb 6-1: config 0 descriptor??
[  292.010584][ T5854] acrux 0003:1A34:F705.0019: item fetching failed at offset 3/7
[  292.044099][ T5854] acrux 0003:1A34:F705.0019: parse failed
[  292.060230][ T5854] acrux: probe of 0003:1A34:F705.0019 failed with error -22
[  292.284843][ T5827] usb 6-1: USB disconnect, device number 3
[  292.912892][ T5777] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  293.125977][ T5777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  293.148916][ T5777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  293.166534][ T5777] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  293.187274][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.212493][ T5777] usb 5-1: Product: syz
[  293.217779][ T5777] usb 5-1: Manufacturer: syz
[  293.265709][ T5777] usb 5-1: SerialNumber: syz
[  293.280553][ T5777] usb 5-1: config 0 descriptor??
[  293.308437][ T5777] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  293.533226][ T5827] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  293.661881][ T5777] snd-usb-audio: probe of 5-1:0.0 failed with error -12
[  293.731103][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.744117][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  293.781137][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.821727][ T5827] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  293.870354][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.899058][ T5827] usb 1-1: config 0 descriptor??
[  293.923724][ T5858] usb 5-1: USB disconnect, device number 15
[  294.350011][ T5827] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor
[  294.381682][ T5827] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001A/input/input46
[  294.515860][ T5827] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  294.600326][ T5827] usb 1-1: USB disconnect, device number 13
[  294.933335][T10329] fido_id[10329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  295.388597][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'.
[  296.019690][T10372] sp0: Synchronizing with TNC
[  296.084078][T10371] [U] è`
[  296.216796][T10376] loop4: detected capacity change from 0 to 2048
[  296.257399][T10376] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  296.313986][T10376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.667332][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  296.667349][   T28] audit: type=1326 audit(1758302028.763:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10390 comm="syz.4.1679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b4498ec29 code=0x0
[  296.854172][T10403] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1682'.
[  298.722675][   T28] audit: type=1326 audit(1758302030.824:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.2.1701" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fadf8ec29 code=0x0
[  298.886059][T10467] sp0: Synchronizing with TNC
[  299.508541][T10473] loop5: detected capacity change from 0 to 4096
[  299.706932][T10473] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  299.730734][T10473] ntfs3: loop5: Failed to load $Extend (-22).
[  299.736893][T10473] ntfs3: loop5: Failed to initialize $Extend.
[  299.909252][T10473] ntfs3: loop5: ino=5, "/" directory corrupted
[  299.915544][T10473] ntfs3: loop5: ino=5, "/" directory corrupted
[  300.146613][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'.
[  300.447793][   T28] audit: type=1326 audit(1758302032.545:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1717" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f847d98ec29 code=0x0
[  300.549039][    T8] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  300.747291][    T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  300.755829][    T8] usb 5-1: config 0 has no interface number 0
[  300.767574][    T8] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  300.777257][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.796598][    T8] usb 5-1: config 0 descriptor??
[  300.811806][    T8] usb 5-1: selecting invalid altsetting 1
[  300.830404][    T8] dvb_ttusb_budget: ttusb_init_controller: error
[  300.840534][    T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  300.907436][    T8] DVB: Unable to find symbol cx22700_attach()
[  300.949998][    T8] DVB: Unable to find symbol tda10046_attach()
[  300.956199][    T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  301.038379][    T8] usb 5-1: USB disconnect, device number 16
[  302.803902][T10523] loop4: detected capacity change from 0 to 32768
[  302.876962][T10523] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  303.001769][T10528] loop5: detected capacity change from 0 to 32768
[  303.227640][ T5879] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  303.289914][T10523] XFS (loop4): Ending clean mount
[  303.434363][ T5879] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  303.457715][ T5879] usb 1-1: config 0 has no interface number 0
[  303.469968][ T5879] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  303.488471][ T7467] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  303.507437][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.522862][ T5879] usb 1-1: config 0 descriptor??
[  303.546973][ T5879] usb 1-1: selecting invalid altsetting 1
[  303.596687][ T5879] dvb_ttusb_budget: ttusb_init_controller: error
[  303.638170][ T5879] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  303.858674][ T5879] DVB: Unable to find symbol cx22700_attach()
[  303.943237][ T5879] DVB: Unable to find symbol tda10046_attach()
[  303.954232][ T5879] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  304.017329][ T5879] usb 1-1: USB disconnect, device number 14
[  304.214785][T10559] loop4: detected capacity change from 0 to 1024
[  304.337126][T10551] loop5: detected capacity change from 0 to 32768
[  304.351710][T10551] XFS: noikeep mount option is deprecated.
[  304.407353][T10551] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.546280][T10551] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  304.609751][T10551] XFS (loop5): Starting recovery (logdev: internal)
[  304.641227][T10551] XFS (loop5): Ending recovery (logdev: internal)
[  304.794979][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'.
[  304.873696][ T9589] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  305.447727][T10589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1758'.
[  305.503213][T10581] loop4: detected capacity change from 0 to 32768
[  306.797211][T10621] hub 9-0:1.0: USB hub found
[  306.814357][T10621] hub 9-0:1.0: 1 port detected
[  307.058048][T10627] loop5: detected capacity change from 0 to 4096
[  307.118902][T10635] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.135149][T10633] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  307.224061][T10627] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  307.250927][T10627] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12)
[  307.279597][T10627] Remounting filesystem read-only
[  307.284694][T10627] NILFS (loop5): error -5 truncating bmap (ino=12)
[  307.362540][ T9589] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  307.405568][ T9589] NILFS (loop5): discard dirty page: offset=0, ino=18
[  307.431842][ T9589] NILFS (loop5): discard dirty block: blocknr=0, size=4096
[  307.466156][ T9589] NILFS (loop5): discard dirty page: offset=0, ino=2
[  307.475794][ T9589] NILFS (loop5): discard dirty block: blocknr=14, size=4096
[  307.495791][ T9589] NILFS (loop5): discard dirty page: offset=0, ino=6
[  307.518844][ T9589] NILFS (loop5): discard dirty block: blocknr=23, size=4096
[  307.545902][ T9589] NILFS (loop5): discard dirty page: offset=4096, ino=6
[  307.552931][ T9589] NILFS (loop5): discard dirty block: blocknr=24, size=4096
[  307.596150][ T9589] NILFS (loop5): discard dirty page: offset=8192, ino=6
[  307.603168][ T9589] NILFS (loop5): discard dirty block: blocknr=25, size=4096
[  307.628335][ T9589] NILFS (loop5): discard dirty page: offset=0, ino=3
[  307.635101][ T9589] NILFS (loop5): discard dirty block: blocknr=28, size=4096
[  307.665323][ T9589] NILFS (loop5): discard dirty page: offset=4096, ino=3
[  307.672347][ T9589] NILFS (loop5): discard dirty block: blocknr=29, size=4096
[  307.695364][ T9589] NILFS (loop5): discard dirty page: offset=270336, ino=3
[  307.702744][ T9589] NILFS (loop5): discard dirty block: blocknr=0, size=4096
[  308.183268][T10644] loop4: detected capacity change from 0 to 32768
[  308.266101][T10644] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  308.312880][T10644] (syz.4.1778,10644,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  308.337898][T10644] (syz.4.1778,10644,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2
[  308.369925][T10644] (syz.4.1778,10644,1):ocfs2_link:762 ERROR: status = -2
[  308.395608][T10644] (syz.4.1778,10644,0):ocfs2_link:840 ERROR: status = -2
[  308.516041][ T7467] ocfs2: Unmounting device (7,4) on (node local)
[  309.064721][ T5854] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  309.274543][ T5854] usb 3-1: Using ep0 maxpacket: 16
[  309.295715][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  309.332083][ T5854] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[  309.351522][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.379205][ T5854] usb 3-1: config 0 descriptor??
[  309.651633][T10717] loop4: detected capacity change from 0 to 512
[  309.720329][T10717] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  309.753889][T10717] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  309.775348][T10717] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  309.795248][T10717] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  309.813346][T10717] System zones: 0-2, 18-18, 34-35
[  309.827956][ T5854] apple 0003:05AC:029F.001B: unknown main item tag 0x0
[  309.831408][T10717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.850797][ T5854] apple 0003:05AC:029F.001B: unknown main item tag 0x0
[  309.878956][ T5854] apple 0003:05AC:029F.001B: unknown main item tag 0x0
[  309.907891][ T5854] apple 0003:05AC:029F.001B: unknown main item tag 0x0
[  309.927553][ T5854] apple 0003:05AC:029F.001B: unknown main item tag 0x0
[  309.944938][ T5827] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  309.969099][ T5854] apple 0003:05AC:029F.001B: hidraw0: USB HID v0.fe Device [HID 05ac:029f] on usb-dummy_hcd.2-1/input0
[  310.029602][ T5854] usb 3-1: USB disconnect, device number 18
[  310.055404][ T7467] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.125959][T10728] fido_id[10728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  310.156692][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.186791][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.209884][ T5827] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  310.236277][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.259402][ T5827] usb 6-1: config 0 descriptor??
[  310.300174][T10734] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  310.704676][ T5827] hid (null): report_id 0 is invalid
[  310.716661][ T5827] hid-steam 0003:28DE:1142.001C: report_id 0 is invalid
[  310.733129][ T5827] hid-steam 0003:28DE:1142.001C: item 0 1 1 8 parsing failed
[  310.749473][ T5827] hid-steam 0003:28DE:1142.001C: steam_probe:parse of hid interface failed
[  310.761121][ T5827] hid-steam: probe of 0003:28DE:1142.001C failed with error -22
[  310.843875][T10732] loop4: detected capacity change from 0 to 40427
[  310.852605][T10732] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  310.888919][T10732] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  310.909365][T10732] F2FS-fs (loop4): invalid crc_offset: 33558524
[  310.937492][ T5827] usb 6-1: USB disconnect, device number 4
[  310.962432][T10732] F2FS-fs (loop4): Found nat_bits in checkpoint
[  311.079809][T10732] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  311.091466][T10732] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  311.616097][T10761] loop5: detected capacity change from 0 to 64
[  311.927211][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1829'.
[  313.283500][T10792] loop4: detected capacity change from 0 to 32768
[  313.425447][T10792] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  313.550442][ T7467] ocfs2: Unmounting device (7,4) on (node local)
[  314.094622][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'.
[  314.802324][ T5854] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  314.994604][ T5854] usb 1-1: Using ep0 maxpacket: 32
[  315.026456][ T5854] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0
[  315.039804][ T5854] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  315.073938][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0
[  315.085332][ T5854] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  315.111476][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.143517][ T5854] usb 1-1: config 0 descriptor??
[  315.320073][T10857] loop5: detected capacity change from 0 to 1024
[  315.424375][T10857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.462543][T10846] loop4: detected capacity change from 0 to 32768
[  315.576652][ T5854] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0
[  315.618545][ T5854] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0
[  315.651369][ T5854] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0
[  315.659349][ T5854] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0
[  315.684911][ T5854] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0
[  315.694455][ T9589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.735158][ T5854] hid-thrustmaster 0003:044F:B65D.001D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[  315.798133][ T5854] hid-thrustmaster 0003:044F:B65D.001D: Unexpected non-int endpoint
[  315.844788][    C1] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -71
[  315.889599][ T5854] usb 1-1: USB disconnect, device number 15
[  316.025332][T10861] fido_id[10861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  316.326375][T10872] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1877'.
[  316.420897][ T5854] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  316.494246][T10878] netlink: 'syz.4.1880': attribute type 2 has an invalid length.
[  316.644510][ T5854] usb 6-1: unable to get BOS descriptor or descriptor too short
[  316.673572][ T5854] usb 6-1: not running at top speed; connect to a high speed hub
[  316.703071][ T5854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.740822][ T5854] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  316.763922][ T5854] usb 6-1: string descriptor 0 read error: -22
[  316.773337][ T5854] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  316.792734][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.822429][ T5854] usb 6-1: 0:2 : does not exist
[  317.410528][  T787] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  317.444526][T10890] loop4: detected capacity change from 0 to 32768
[  317.456770][ T5854] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  317.467015][T10890] XFS: noikeep mount option is deprecated.
[  317.473667][ T5854] usb 6-1: Warning! Unlikely big volume range (=12453), cval->res is probably wrong.
[  317.484781][ T5854] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/12453/1
[  317.502301][ T5854] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  317.531464][ T5854] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  317.542627][T10890] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  317.601848][ T5854] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  317.610644][  T787] usb 1-1: Using ep0 maxpacket: 16
[  317.638608][  T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.662800][ T5854] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  317.678926][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  317.683565][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  317.688591][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  317.725952][ T5854] usb 6-1: USB disconnect, device number 5
[  317.734894][T10890] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  317.746919][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  317.773387][  T787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  317.813569][  T787] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  317.852839][T10890] XFS (loop4): Starting recovery (logdev: internal)
[  317.853669][  T787] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  317.871520][  T787] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  317.881956][  T787] usb 1-1: Manufacturer: syz
[  317.885886][T10890] XFS (loop4): Ending recovery (logdev: internal)
[  317.889533][  T787] usb 1-1: config 0 descriptor??
[  318.004640][ T7467] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  318.277296][  T787] rc_core: IR keymap rc-hauppauge not found
[  318.287478][  T787] Registered IR keymap rc-empty
[  318.295778][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.330336][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.381374][  T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  318.411023][  T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input47
[  318.461622][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.520209][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.560155][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.610018][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.652624][T10921] loop5: detected capacity change from 0 to 256
[  318.660360][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.709892][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.728254][T10923] loop4: detected capacity change from 0 to 1764
[  318.749999][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.763334][T10921] FAT-fs (loop5): Directory bread(block 64) failed
[  318.776534][T10921] FAT-fs (loop5): Directory bread(block 65) failed
[  318.784057][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.807837][T10921] FAT-fs (loop5): Directory bread(block 66) failed
[  318.819351][T10921] FAT-fs (loop5): Directory bread(block 67) failed
[  318.828435][T10921] FAT-fs (loop5): Directory bread(block 68) failed
[  318.835180][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.844148][T10921] FAT-fs (loop5): Directory bread(block 69) failed
[  318.853948][T10921] FAT-fs (loop5): Directory bread(block 70) failed
[  318.863858][T10921] FAT-fs (loop5): Directory bread(block 71) failed
[  318.870986][T10921] FAT-fs (loop5): Directory bread(block 72) failed
[  318.877742][T10921] FAT-fs (loop5): Directory bread(block 73) failed
[  318.879746][  T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  318.955345][  T787] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  318.966831][  T787] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  318.986139][  T787] usb 1-1: USB disconnect, device number 16
[  319.433121][T10939] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  319.829518][   T28] audit: type=1326 audit(1758302307.930:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7fc00000
[  319.851941][    C1] vkms_vblank_simulate: vblank timer overrun
[  319.907374][   T28] audit: type=1326 audit(1758302307.930:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b4498ec29 code=0x7fc00000
[  319.969156][   T28] audit: type=1326 audit(1758302307.930:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7fc00000
[  320.030907][T10957] sp0: Synchronizing with TNC
[  320.051419][   T28] audit: type=1326 audit(1758302307.930:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7fc00000
[  320.098753][   T28] audit: type=1326 audit(1758302307.930:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7fc00000
[  320.121092][    C1] vkms_vblank_simulate: vblank timer overrun
[  320.125541][T10962] loop5: detected capacity change from 0 to 128
[  320.138477][   T28] audit: type=1326 audit(1758302307.930:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7fc00000
[  320.179448][   T28] audit: type=1326 audit(1758302307.930:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7fc00000
[  320.201739][    C1] vkms_vblank_simulate: vblank timer overrun
[  320.208601][T10962] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  320.259220][T10962] hpfs: filesystem error: improperly stopped
[  320.282528][T10962] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  320.312391][T10962] hpfs: You really don't want any checks? You are crazy...
[  320.356409][T10962] hpfs: hpfs_map_sector(): read error
[  320.377076][T10962] hpfs: code page support is disabled
[  320.387766][T10962] hpfs: hpfs_map_4sectors(): unaligned read
[  320.395230][T10962] hpfs: hpfs_map_4sectors(): unaligned read
[  320.405803][T10962] hpfs: filesystem error: unable to find root dir
[  321.243255][T10976] loop5: detected capacity change from 0 to 32768
[  321.482483][T10989] loop5: detected capacity change from 0 to 2048
[  321.576278][T10989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.633044][T10989] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.913380][ T9589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.180786][T11007] loop5: detected capacity change from 0 to 4096
[  322.405501][T11007] ntfs: volume version 3.1.
[  323.153592][T11031] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1939'.
[  323.669866][  T787] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  323.857463][  T787] usb 6-1: Using ep0 maxpacket: 8
[  323.889964][  T787] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  323.901400][  T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.916869][  T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.930223][  T787] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  323.967578][  T787] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  323.976902][  T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.006520][  T787] usb 6-1: config 0 descriptor??
[  324.317006][    T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  324.460732][  T787] redragon 0003:0C45:760B.001E: Fixing Redragon ASURA report descriptor.
[  324.482816][  T787] redragon 0003:0C45:760B.001E: unknown main item tag 0x6
[  324.494937][  T787] redragon 0003:0C45:760B.001E: item fetching failed at offset 7/133
[  324.497077][    T8] usb 5-1: Using ep0 maxpacket: 16
[  324.505530][  T787] redragon: probe of 0003:0C45:760B.001E failed with error -22
[  324.521080][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.543639][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.554168][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  324.567775][    T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  324.577229][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.594512][    T8] usb 5-1: config 0 descriptor??
[  324.708046][ T5879] usb 6-1: USB disconnect, device number 6
[  325.043135][    T8] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  325.062248][    T8] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max
[  325.075090][    T8] microsoft 0003:045E:07DA.001F: implement() called with n (56) > 32! (kworker/0:0)
[  325.244205][    T8] microsoft 0003:045E:07DA.001F: No inputs registered, leaving
[  325.277841][    T8] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  325.325817][    T8] microsoft 0003:045E:07DA.001F: no inputs found
[  325.346440][    T8] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway
[  325.382368][    T8] usb 5-1: USB disconnect, device number 17
[  325.452118][T11088] fido_id[11088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  326.103851][T11109] loop5: detected capacity change from 0 to 8192
[  326.129647][T11109] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  326.143778][T11109] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  326.160851][T11109] REISERFS (device loop5): using ordered data mode
[  326.167951][T11109] reiserfs: using flush barriers
[  326.177285][T11109] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  326.195640][T11109] REISERFS (device loop5): checking transaction log (loop5)
[  326.413280][T11109] REISERFS (device loop5): Using tea hash to sort names
[  326.427749][T11109] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  327.005761][T11118] loop4: detected capacity change from 0 to 40427
[  327.046254][T11118] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  327.062615][T11118] F2FS-fs (loop4): invalid crc value
[  327.101287][T11118] F2FS-fs (loop4): Found nat_bits in checkpoint
[  327.125766][  T787] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  327.185655][T11118] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  327.288000][ T7467] syz-executor: attempt to access beyond end of device
[  327.288000][ T7467] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  327.313706][ T7467] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  327.356901][  T787] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  327.389940][  T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.429997][  T787] usb 6-1: Product: syz
[  327.434237][  T787] usb 6-1: Manufacturer: syz
[  327.445467][  T787] usb 6-1: SerialNumber: syz
[  327.461107][  T787] usb 6-1: config 0 descriptor??
[  327.880249][   T28] audit: type=1326 audit(1758302315.994:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7ffc0000
[  327.900428][T11145] loop4: detected capacity change from 0 to 512
[  327.914357][   T28] audit: type=1326 audit(1758302315.994:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7ffc0000
[  327.944343][   T28] audit: type=1326 audit(1758302315.994:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1b4498ec29 code=0x7ffc0000
[  327.967511][   T28] audit: type=1326 audit(1758302315.994:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7ffc0000
[  327.990900][   T28] audit: type=1326 audit(1758302315.994:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4498ec29 code=0x7ffc0000
[  328.013685][   T28] audit: type=1326 audit(1758302315.994:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b4498ec29 code=0x7ffc0000
[  328.036161][   T28] audit: type=1326 audit(1758302315.994:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b4498ec63 code=0x7ffc0000
[  328.057642][   T28] audit: type=1326 audit(1758302315.994:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b4498d6df code=0x7ffc0000
[  328.063590][T11145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.079702][   T28] audit: type=1326 audit(1758302315.994:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1b4498ecb7 code=0x7ffc0000
[  328.114325][   T28] audit: type=1326 audit(1758302315.994:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b4498d590 code=0x7ffc0000
[  328.122713][T11145] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  328.148666][  T787] usb 6-1: Firmware version (0.0) predates our first public release.
[  328.157109][  T787] usb 6-1: Please update to version 0.2 or newer
[  328.225697][  T787] usb 6-1: USB disconnect, device number 7
[  328.261345][ T7467] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.126001][ T5777] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  329.326887][ T5777] usb 6-1: config 0 has an invalid interface number: 112 but max is 0
[  329.335580][ T5777] usb 6-1: config 0 has no interface number 0
[  329.350863][ T5777] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  329.360137][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.368471][ T5777] usb 6-1: Product: syz
[  329.372691][ T5777] usb 6-1: Manufacturer: syz
[  329.377414][ T5777] usb 6-1: SerialNumber: syz
[  329.385346][ T5777] usb 6-1: config 0 descriptor??
[  329.403478][ T5777] mvusb_mdio: probe of 6-1:0.112 failed with error -5
[  329.566340][T11177] sp0: Synchronizing with TNC
[  329.691819][ T5777] usb 6-1: USB disconnect, device number 8
[  330.094577][ T5879] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  330.276494][ T5879] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  330.289660][ T5879] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  330.304289][ T5879] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  330.344419][ T5879] usb 5-1: config 220 has no interface number 2
[  330.354324][ T5879] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  330.389226][ T5879] usb 5-1: config 220 interface 0 has no altsetting 0
[  330.397695][T11194] loop5: detected capacity change from 0 to 512
[  330.403936][ T5879] usb 5-1: config 220 interface 76 has no altsetting 0
[  330.415077][T11194] EXT4-fs: Ignoring removed nomblk_io_submit option
[  330.421737][T11194] EXT4-fs: Ignoring removed bh option
[  330.426266][ T5879] usb 5-1: config 220 interface 1 has no altsetting 0
[  330.460045][ T5879] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  330.481967][T11194] EXT4-fs error (device loop5): mb_free_blocks:1938: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  330.499401][T11194] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #11: comm syz.5.2012: corrupted inode contents
[  330.512236][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.515670][T11194] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #11: comm syz.5.2012: mark_inode_dirty error
[  330.543630][T11194] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2012: invalid indirect mapped block 1 (level 1)
[  330.556380][ T5879] usb 5-1: Product: syz
[  330.567801][T11194] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #11: comm syz.5.2012: corrupted inode contents
[  330.574545][ T5879] usb 5-1: Manufacturer: syz
[  330.589929][ T5879] usb 5-1: SerialNumber: syz
[  330.593546][T11194] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  330.608726][T11194] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #11: comm syz.5.2012: corrupted inode contents
[  330.622156][T11194] EXT4-fs error (device loop5): ext4_truncate:4288: inode #11: comm syz.5.2012: mark_inode_dirty error
[  330.634841][T11194] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  330.646120][T11194] EXT4-fs (loop5): 1 truncate cleaned up
[  330.653049][T11194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.697713][T11194] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.2012: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  330.760619][ T9589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.826443][ T5879] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  330.832884][ T5879] usb 5-1: No valid video chain found.
[  330.853043][ T5879] usb 5-1: selecting invalid altsetting 0
[  330.888772][ T5879] usb 5-1: selecting invalid altsetting 0
[  330.895135][ T5879] usbtest: probe of 5-1:220.1 failed with error -22
[  330.905162][ T5879] usb 5-1: USB disconnect, device number 18
[  331.226881][T11211] sp0: Synchronizing with TNC
[  331.558665][T11222] loop5: detected capacity change from 0 to 256
[  331.641798][T11222] FAT-fs (loop5): Directory bread(block 64) failed
[  331.674101][T11222] FAT-fs (loop5): Directory bread(block 65) failed
[  331.705589][T11222] FAT-fs (loop5): Directory bread(block 66) failed
[  331.712237][T11222] FAT-fs (loop5): Directory bread(block 67) failed
[  331.765012][T11222] FAT-fs (loop5): Directory bread(block 68) failed
[  331.794415][T11222] FAT-fs (loop5): Directory bread(block 69) failed
[  331.801836][T11222] FAT-fs (loop5): Directory bread(block 70) failed
[  331.833248][T11222] FAT-fs (loop5): Directory bread(block 71) failed
[  331.843640][T11222] FAT-fs (loop5): Directory bread(block 72) failed
[  331.860834][T11222] FAT-fs (loop5): Directory bread(block 73) failed
[  332.389856][T11239] loop5: detected capacity change from 0 to 4096
[  332.750022][T11236] loop4: detected capacity change from 0 to 32768
[  332.833212][T11236] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  332.966571][T11236] XFS (loop4): Ending clean mount
[  333.185912][ T7467] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  334.092998][ T5858] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  334.304027][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.315467][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.331875][ T5858] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  334.358715][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.393616][ T5858] usb 1-1: config 0 descriptor??
[  334.598954][T11265] loop5: detected capacity change from 0 to 32768
[  334.656050][T11265] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  334.669250][T11265] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  334.780909][T11265] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  334.819615][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  334.831644][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  334.880335][ T5858] hid (null): report_id 0 is invalid
[  334.927194][ T5858] hid-steam 0003:28DE:1142.0020: report_id 0 is invalid
[  334.945956][ T5858] hid-steam 0003:28DE:1142.0020: item 0 1 1 8 parsing failed
[  334.956535][ T5858] hid-steam 0003:28DE:1142.0020: steam_probe:parse of hid interface failed
[  334.970506][ T5858] hid-steam: probe of 0003:28DE:1142.0020 failed with error -22
[  334.985895][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 154ms
[  335.016357][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done
[  335.024913][T11265] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  335.148730][ T5879] usb 1-1: USB disconnect, device number 17
[  335.603042][T11280] loop4: detected capacity change from 0 to 32768
[  335.613002][T11265] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[  335.613002][T11265]   bh = 2049 (type: exp=14, found=8)
[  335.613002][T11265]   function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1417
[  335.637081][T11280] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  335.641243][T11265] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  335.652101][T11265] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  335.660910][T11265] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  335.670018][T11265] gfs2: fsid=syz:syz.0: File system withdrawn
[  335.676396][T11265] CPU: 1 PID: 11265 Comm: syz.5.2043 Not tainted syzkaller #0
[  335.683901][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  335.694012][T11265] Call Trace:
[  335.697337][T11265]  <TASK>
[  335.700302][T11265]  dump_stack_lvl+0x16c/0x230
[  335.705033][T11265]  ? kobject_uevent_env+0x363/0x8c0
[  335.710278][T11265]  ? show_regs_print_info+0x20/0x20
[  335.715539][T11265]  ? load_image+0x3b0/0x3b0
[  335.720083][T11265]  ? kobject_uevent_env+0x363/0x8c0
[  335.725339][T11265]  gfs2_withdraw+0xe50/0x13b0
[  335.730091][T11265]  ? gfs2_lm+0x220/0x220
[  335.734384][T11265]  ? __wait_on_bit+0x2d0/0x2d0
[  335.739207][T11265]  ? bit_waitqueue+0x30/0x30
[  335.743848][T11265]  gfs2_metatype_check_ii+0x78/0x90
[  335.749095][T11265]  gfs2_quota_init+0xc85/0xe80
[  335.753946][T11265]  ? qd_put+0x1a0/0x1a0
[  335.758165][T11265]  ? inode_go_inval+0x12d/0x2b0
[  335.763072][T11265]  gfs2_make_fs_rw+0x3f5/0x530
[  335.767908][T11265]  ? gfs2_jdesc_check+0x2a0/0x2a0
[  335.772997][T11265]  ? do_raw_spin_lock+0x121/0x2c0
[  335.778101][T11265]  ? __rwlock_init+0x150/0x150
[  335.782924][T11265]  ? do_raw_spin_unlock+0x121/0x230
[  335.788169][T11265]  gfs2_reconfigure+0x612/0xb10
[  335.793100][T11265]  reconfigure_super+0x21e/0x880
[  335.798085][T11265]  vfs_fsconfig_locked+0x16c/0x320
[  335.803228][T11265]  __se_sys_fsconfig+0x700/0x850
[  335.808198][T11265]  ? __x64_sys_fsconfig+0xc0/0xc0
[  335.813255][T11265]  ? lockdep_hardirqs_on+0x98/0x150
[  335.818483][T11265]  ? __x64_sys_fsconfig+0x20/0xc0
[  335.823537][T11265]  do_syscall_64+0x55/0xb0
[  335.827978][T11265]  ? clear_bhb_loop+0x40/0x90
[  335.832672][T11265]  ? clear_bhb_loop+0x40/0x90
[  335.837404][T11265]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  335.843330][T11265] RIP: 0033:0x7f847d98ec29
[  335.847765][T11265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.867415][T11265] RSP: 002b:00007f847e7e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  335.875864][T11265] RAX: ffffffffffffffda RBX: 00007f847dbd5fa0 RCX: 00007f847d98ec29
[  335.883859][T11265] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004
[  335.891855][T11265] RBP: 00007f847da11e41 R08: 0000000000000000 R09: 0000000000000000
[  335.899844][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.907837][T11265] R13: 00007f847dbd6038 R14: 00007f847dbd5fa0 R15: 00007fffc8ec5868
[  335.915845][T11265]  </TASK>
[  335.920528][T11280] CPU: 1 PID: 11280 Comm: syz.4.2049 Not tainted syzkaller #0
[  335.928057][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  335.938166][T11280] Call Trace:
[  335.941492][T11280]  <TASK>
[  335.944467][T11280]  dump_stack_lvl+0x16c/0x230
[  335.949206][T11280]  ? show_regs_print_info+0x20/0x20
[  335.954459][T11280]  ? load_image+0x3b0/0x3b0
[  335.959032][T11280]  sysfs_create_dir_ns+0x256/0x280
[  335.964204][T11280]  ? sysfs_warn_dup+0xa0/0xa0
[  335.968932][T11280]  ? do_raw_spin_unlock+0x121/0x230
[  335.974187][T11280]  kobject_add_internal+0x6b8/0xc70
[  335.979449][T11280]  kobject_init_and_add+0x126/0x190
[  335.984703][T11280]  ? lockdep_softirqs_off+0x430/0x430
[  335.990132][T11280]  ? kobject_add+0x220/0x220
[  335.994795][T11280]  ? __init_swait_queue_head+0xa9/0x150
[  336.000394][T11280]  gfs2_sys_fs_add+0x238/0x470
[  336.005214][T11280]  ? gfs2_recover_set+0x250/0x250
[  336.010298][T11280]  ? apply_workqueue_attrs+0x180/0x180
[  336.015829][T11280]  gfs2_fill_super+0x1323/0x1f80
[  336.020841][T11280]  ? gfs2_reconfigure+0xb10/0xb10
[  336.025935][T11280]  ? setup_bdev_super+0x56b/0x660
[  336.031011][T11280]  get_tree_bdev+0x3e4/0x510
[  336.035650][T11280]  ? end_current_label_crit_section+0x170/0x170
[  336.041939][T11280]  ? gfs2_reconfigure+0xb10/0xb10
[  336.047012][T11280]  ? setup_bdev_super+0x660/0x660
[  336.052104][T11280]  gfs2_get_tree+0x51/0x1e0
[  336.056691][T11280]  vfs_get_tree+0x8c/0x280
[  336.061157][T11280]  do_new_mount+0x24b/0xa40
[  336.065706][T11280]  __se_sys_mount+0x2da/0x3c0
[  336.070406][T11280]  ? __x64_sys_mount+0xc0/0xc0
[  336.075189][T11280]  ? lockdep_hardirqs_on+0x98/0x150
[  336.080407][T11280]  ? __x64_sys_mount+0x20/0xc0
[  336.085225][T11280]  do_syscall_64+0x55/0xb0
[  336.089665][T11280]  ? clear_bhb_loop+0x40/0x90
[  336.094361][T11280]  ? clear_bhb_loop+0x40/0x90
[  336.099057][T11280]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  336.104983][T11280] RIP: 0033:0x7f1b449903ca
[  336.109417][T11280] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.129099][T11280] RSP: 002b:00007f1b45795e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  336.137540][T11280] RAX: ffffffffffffffda RBX: 00007f1b45795ef0 RCX: 00007f1b449903ca
[  336.145535][T11280] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007f1b45795eb0
[  336.153522][T11280] RBP: 0000200000000100 R08: 00007f1b45795ef0 R09: 0000000000004004
[  336.161508][T11280] R10: 0000000000004004 R11: 0000000000000246 R12: 0000200000012500
[  336.169505][T11280] R13: 00007f1b45795eb0 R14: 00000000000125bb R15: 0000200000000600
[  336.177508][T11280]  </TASK>
[  336.237372][T11280] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  336.270997][T11280] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  337.312258][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'.
[  337.810322][ T5854] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  337.968405][T11298] loop4: detected capacity change from 0 to 32768
[  337.977301][T11298] XFS: ikeep mount option is deprecated.
[  338.000359][ T5854] usb 1-1: Using ep0 maxpacket: 16
[  338.006937][T11298] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  338.022376][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.034372][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.045993][ T5854] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  338.062745][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.107238][ T5854] usb 1-1: config 0 descriptor??
[  338.187983][T11298] XFS (loop4): Ending clean mount
[  338.221953][T11298] XFS (loop4): Quotacheck needed: Please wait.
[  338.288640][T11298] XFS (loop4): Quotacheck: Done.
[  338.472230][ T7467] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  338.580781][ T5854] apple 0003:05AC:024B.0021: unknown main item tag 0x6
[  338.609836][ T5854] apple 0003:05AC:024B.0021: ignoring exceeding usage max
[  338.618393][ T5854] apple 0003:05AC:024B.0021: invalid report_size 16640
[  338.647570][ T5854] apple 0003:05AC:024B.0021: item 0 2 1 7 parsing failed
[  338.672063][ T5854] apple 0003:05AC:024B.0021: parse failed
[  338.694459][ T5854] apple: probe of 0003:05AC:024B.0021 failed with error -22
[  338.830004][T11313] loop5: detected capacity change from 0 to 4096
[  338.833838][ T5854] usb 1-1: USB disconnect, device number 18
[  338.864246][T11313] __ntfs_error: 12 callbacks suppressed
[  338.864267][T11313] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  338.938616][T11313] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  338.964961][T11313] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  338.978453][T11313] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  339.033803][T11313] ntfs: volume version 3.1.
[  339.148971][T11313] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp857.  You might want to try to use the mount option nls=utf8.
[  339.185528][T11313] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  339.206105][T11313] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp857.  You might want to try to use the mount option nls=utf8.
[  339.230167][T11313] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x45.
[  339.317512][T11319] sp0: Synchronizing with TNC
[  340.188135][   T28] audit: type=1326 audit(1758302328.300:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11337 comm="syz.0.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243a38ec29 code=0x7ffc0000
[  340.249666][   T28] audit: type=1326 audit(1758302328.300:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11337 comm="syz.0.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243a38ec29 code=0x7ffc0000
[  340.474766][T11346] loop5: detected capacity change from 0 to 2048
[  340.500884][T11346] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  340.565055][ T7829] udevd[7829]: incorrect nilfs2 checksum on /dev/loop5
[  340.576295][T11347] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  340.898766][ T5777] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  340.931543][T11355] loop5: detected capacity change from 0 to 4096
[  341.098777][ T5777] usb 1-1: Using ep0 maxpacket: 32
[  341.120964][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.148036][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.175357][ T5777] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00
[  341.194907][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.226628][ T5777] usb 1-1: config 0 descriptor??
[  341.281678][T11350] loop4: detected capacity change from 0 to 40427
[  341.326065][T11355] ntfs3: Cannot use different iocharset when remounting!
[  341.329309][T11350] F2FS-fs (loop4): invalid crc value
[  341.348568][T11350] F2FS-fs (loop4): Found nat_bits in checkpoint
[  341.484298][T11350] F2FS-fs (loop4): Start checkpoint disabled!
[  341.528614][T11350] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  341.621063][T11361] loop5: detected capacity change from 0 to 256
[  341.646755][T11361] exfat: Deprecated parameter 'utf8'
[  341.668075][T11361] exfat: Deprecated parameter 'namecase'
[  341.680593][T11361] exfat: Deprecated parameter 'utf8'
[  341.691778][ T5777] aquacomputer_d5next 0003:0C70:F00A.0022: unknown main item tag 0x7
[  341.716761][T11361] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  341.722797][ T5777] aquacomputer_d5next 0003:0C70:F00A.0022: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.0-1/input0
[  341.758235][ T5827] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  341.841597][ T4463] kworker/u4:9: attempt to access beyond end of device
[  341.841597][ T4463] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  341.872616][ T4463] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  341.880714][ T4463] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  341.962841][ T5777] usb 1-1: USB disconnect, device number 19
[  341.991418][ T5827] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  342.028924][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.037602][ T5827] usb 3-1: Product: syz
[  342.100746][ T5827] usb 3-1: Manufacturer: syz
[  342.105532][ T5827] usb 3-1: SerialNumber: syz
[  342.126573][ T5827] usb 3-1: config 0 descriptor??
[  342.615893][T11371] netlink: 'syz.5.2085': attribute type 3 has an invalid length.
[  342.802664][ T5827] usb 3-1: Firmware version (0.0) predates our first public release.
[  342.827633][ T5827] usb 3-1: Please update to version 0.2 or newer
[  342.931430][ T5827] usb 3-1: USB disconnect, device number 19
[  342.980598][T11368] loop4: detected capacity change from 0 to 40427
[  342.989865][T11368] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  343.008007][T11368] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  343.036317][T11368] F2FS-fs (loop4): invalid crc value
[  343.071071][T11368] F2FS-fs (loop4): Found nat_bits in checkpoint
[  343.219359][T11368] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  343.236882][T11368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  343.874558][T11402] loop4: detected capacity change from 0 to 512
[  343.965430][T11402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.997414][T11402] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  344.102321][ T7467] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.309009][T11411] loop4: detected capacity change from 0 to 256
[  344.458684][T11411] FAT-fs (loop4): Directory bread(block 64) failed
[  344.465306][T11411] FAT-fs (loop4): Directory bread(block 65) failed
[  344.482687][T11396] loop5: detected capacity change from 0 to 32768
[  344.490277][T11411] FAT-fs (loop4): Directory bread(block 66) failed
[  344.497392][T11411] FAT-fs (loop4): Directory bread(block 67) failed
[  344.521924][T11411] FAT-fs (loop4): Directory bread(block 68) failed
[  344.531721][T11411] FAT-fs (loop4): Directory bread(block 69) failed
[  344.555655][T11411] FAT-fs (loop4): Directory bread(block 70) failed
[  344.570763][T11396] find_entry called with index = 0
[  344.576048][T11411] FAT-fs (loop4): Directory bread(block 71) failed
[  344.592619][T11396] read_mapping_page failed!
[  344.597455][T11411] FAT-fs (loop4): Directory bread(block 72) failed
[  344.604025][T11411] FAT-fs (loop4): Directory bread(block 73) failed
[  344.612123][T11396] ERROR: (device loop5): txCommit: 
[  344.612123][T11396] 
[  344.630313][T11396] ERROR: (device loop5): diFree: numfree > numinos
[  344.630313][T11396] 
[  344.898608][T11416] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2098'.
[  345.533109][T11435] loop4: detected capacity change from 0 to 8
[  345.549519][T11435] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  345.613779][ T7829] udevd[7829]: incorrect cramfs checksum on /dev/loop4
[  345.635843][T11435] cramfs: Error -3 while decompressing!
[  345.655034][T11435] cramfs: ffffffff96fdc298(16)->ffff888076bbe000(4096)
[  345.662566][T11435] cramfs: Error -3 while decompressing!
[  345.668591][T11435] cramfs: ffffffff96fdc298(16)->ffff888076bbe000(4096)
[  345.675707][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  345.675721][   T28] audit: type=1800 audit(1758302333.793:119): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2110" name="file0" dev="loop4" ino=244 res=0 errno=0
[  345.968450][T11451] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.195648][T11459] loop4: detected capacity change from 0 to 1024
[  346.207308][    T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  346.282195][T11459] hfsplus: bad catalog entry type
[  346.366799][ T4463] hfsplus: b-tree write err: -5, ino 4
[  346.400763][    T8] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.436742][    T8] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.474717][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  346.485863][    T8] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  346.494979][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.556730][    T8] usb 1-1: config 0 descriptor??
[  346.866118][T11445] loop5: detected capacity change from 0 to 32768
[  346.943540][T11445] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  347.054940][T11445] XFS (loop5): Ending clean mount
[  347.080042][    T8] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0023/input/input48
[  347.098387][T11445] XFS (loop5): Quotacheck needed: Please wait.
[  347.249221][    T8] sony 0003:054C:03D5.0023: input,hidraw0: USB HID v1d.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0
[  347.284252][T11445] XFS (loop5): Quotacheck: Done.
[  347.332820][    T8] usb 1-1: USB disconnect, device number 20
[  347.532070][ T9589] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  347.552119][T11493] fido_id[11493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  347.882078][T11508] sp0: Synchronizing with TNC
[  347.903545][T11508] sp0: Found TNC
[  348.175453][    T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  348.369026][    T8] usb 1-1: Using ep0 maxpacket: 16
[  348.383201][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  348.425500][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25454, setting to 1024
[  348.444645][    T8] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  348.462814][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.471706][    T8] usb 1-1: Product: syz
[  348.481071][    T8] usb 1-1: Manufacturer: syz
[  348.488921][    T8] usb 1-1: SerialNumber: syz
[  348.502049][    T8] usb 1-1: config 0 descriptor??
[  348.520967][    T8] hub 1-1:0.0: bad descriptor, ignoring hub
[  348.531018][    T8] hub: probe of 1-1:0.0 failed with error -5
[  348.545054][T11533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2138'.
[  348.558936][    T8] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49
[  349.230827][T11551] netlink: 'syz.5.2128': attribute type 5 has an invalid length.
[  349.702029][T11570] loop4: detected capacity change from 0 to 256
[  350.959136][T11589] loop4: detected capacity change from 0 to 32768
[  350.987042][T11589] XFS: ikeep mount option is deprecated.
[  350.992775][T11589] XFS: noikeep mount option is deprecated.
[  351.047952][T11613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2173'.
[  351.068436][T11613] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  351.098585][T11589] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  351.230414][T11589] XFS (loop4): Ending clean mount
[  351.274343][T11589] XFS (loop4): Quotacheck needed: Please wait.
[  351.402113][T11589] XFS (loop4): Quotacheck: Done.
[  351.534122][ T7467] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  351.562462][T11635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2179'.
[  351.722998][T11615] loop5: detected capacity change from 0 to 32768
[  351.779911][T11615] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  351.866061][T11615] XFS (loop5): Ending clean mount
[  351.894365][T11615] XFS (loop5): Quotacheck needed: Please wait.
[  352.064323][T11615] XFS (loop5): Quotacheck: Done.
[  352.226977][ T9589] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  352.908950][T11671] loop5: detected capacity change from 0 to 2048
[  353.261218][    T8] usb 1-1: USB disconnect, device number 21
[  353.636528][T11690] ALSA: mixer_oss: invalid OSS volume ''
[  354.092834][T11700] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in;
[  354.092834][T11700]    program syz.2.2207 not setting count and/or reply_len properly
[  354.503367][T11693] loop4: detected capacity change from 0 to 32768
[  354.582782][T11693] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  354.635754][T11694] loop5: detected capacity change from 0 to 40427
[  354.690064][T11694] F2FS-fs (loop5): invalid crc value
[  354.695574][T11694] F2FS-fs (loop5): Found nat_bits in checkpoint
[  354.703314][ T5827] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  354.721318][T11693] XFS (loop4): Ending clean mount
[  354.754222][   T28] audit: type=1800 audit(1758302342.887:120): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2203" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  354.786771][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-diskseq/573.tmp-b7:4' failed: Read-only file system
[  354.788467][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  354.850723][T11694] F2FS-fs (loop5): Start checkpoint disabled!
[  354.868232][T11694] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  354.893706][ T7802] udevd[7802]: symlink '../../loop5' '/dev/disk/by-diskseq/574.tmp-b7:5' failed: Read-only file system
[  354.898890][ T7467] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  354.920855][ T7802] udevd[7802]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  354.955298][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.955352][ T5827] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  354.955386][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.958003][ T5827] usb 1-1: config 0 descriptor??
[  355.033727][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-diskseq/573.tmp-b7:4' failed: Read-only file system
[  355.035504][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  355.096767][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-diskseq/573.tmp-b7:4' failed: Read-only file system
[  355.137975][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-diskseq/573.tmp-b7:4' failed: Read-only file system
[  355.262885][   T58] kworker/u4:4: attempt to access beyond end of device
[  355.262885][   T58] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  355.263033][   T58] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  355.263351][   T58] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  355.395330][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/575.tmp-b7:4' failed: Read-only file system
[  355.422784][ T5827] nintendo 0003:057E:200E.0024: unbalanced delimiter at end of report description
[  355.452910][ T5827] nintendo 0003:057E:200E.0024: HID parse failed
[  355.462741][ T5827] nintendo 0003:057E:200E.0024: probe - fail = -22
[  355.470379][ T5827] nintendo: probe of 0003:057E:200E.0024 failed with error -22
[  355.535249][ T7802] udevd[7802]: symlink '../../loop5' '/dev/disk/by-diskseq/574.tmp-b7:5' failed: Read-only file system
[  355.586184][ T5827] usb 1-1: USB disconnect, device number 22
[  356.050472][T11724] loop4: detected capacity change from 0 to 32768
[  356.240129][    C1] sd 0:0:1:0: [sda] tag#1686 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  356.250702][    C1] sd 0:0:1:0: [sda] tag#1686 CDB: Read(6) 08 00 00 00 00 00
[  356.753928][T11758] loop5: detected capacity change from 0 to 256
[  356.903304][T11758] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  357.362223][T11773] loop5: detected capacity change from 0 to 64
[  357.551634][T11777] loop4: detected capacity change from 0 to 136
[  357.597966][T11777] Symlink component flag not implemented
[  357.610037][T11777] Symlink component flag not implemented (108)
[  358.228294][T11794] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2247'.
[  358.255111][T11794] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2247'.
[  358.265455][T11792] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2247'.
[  358.285504][T11796] dvmrp1: entered allmulticast mode
[  358.299200][T11796] dvmrp1: left allmulticast mode
[  358.310493][ T5777] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  358.449135][T11800] program syz.5.2250 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  358.500765][ T5777] usb 5-1: Using ep0 maxpacket: 8
[  358.512435][ T5777] usb 5-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  358.530029][ T5777] usb 5-1: config 0 interface 0 has no altsetting 0
[  358.545405][ T5777] usb 5-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  358.564979][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.586070][ T5777] usb 5-1: config 0 descriptor??
[  358.889233][T11808] loop5: detected capacity change from 0 to 512
[  358.950040][T11808] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  359.009711][T11808] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0022]
[  359.040720][T11808] System zones: 0-1, 15-15, 18-18, 34-34
[  359.051897][ T5777] wacom 0003:056A:00D6.0025: Unknown device_type for 'HID 056a:00d6'. Assuming pen.
[  359.080722][T11808] EXT4-fs (loop5): orphan cleanup on readonly fs
[  359.087246][T11808] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  359.097170][T11808] EXT4-fs warning (device loop5): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  359.111850][T11808] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  359.128813][ T5777] wacom 0003:056A:00D6.0025: hidraw0: USB HID v0.07 Device [HID 056a:00d6] on usb-dummy_hcd.4-1/input0
[  359.129577][T11808] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2254: bg 0: block 40: padding at end of block bitmap is not set
[  359.188764][ T5777] input: Wacom BambooPT 2FG 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D6.0025/input/input50
[  359.209145][T11808] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  359.248498][ T5777] usb 5-1: USB disconnect, device number 19
[  359.264647][T11808] EXT4-fs (loop5): 1 truncate cleaned up
[  359.304065][T11808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  359.403639][T11814] fido_id[11814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  359.468943][ T9589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.659831][T11827] netlink: 'syz.2.2262': attribute type 29 has an invalid length.
[  359.800581][ T7829] udevd[7829]: symlink '../../loop5' '/dev/disk/by-diskseq/586.tmp-b7:5' failed: Read-only file system
[  359.838649][T11833] loop5: detected capacity change from 0 to 256
[  359.848544][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/584.tmp-b7:4' failed: Read-only file system
[  359.964867][ T7829] udevd[7829]: symlink '../../loop5' '/dev/disk/by-diskseq/587.tmp-b7:5' failed: Read-only file system
[  359.990143][ T5777] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  360.017592][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/584.tmp-b7:4' failed: Read-only file system
[  360.084424][ T7829] udevd[7829]: symlink '../../loop5' '/dev/disk/by-diskseq/587.tmp-b7:5' failed: Read-only file system
[  360.126246][ T7802] udevd[7802]: symlink '../../loop5' '/dev/disk/by-diskseq/587.tmp-b7:5' failed: Read-only file system
[  360.164552][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-diskseq/584.tmp-b7:4' failed: Read-only file system
[  360.195719][ T7802] udevd[7802]: symlink '../../loop5' '/dev/disk/by-diskseq/587.tmp-b7:5' failed: Read-only file system
[  360.219790][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  360.249366][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.281761][ T5777] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  360.309418][ T5777] usb 1-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00
[  360.329035][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.338069][ T5777] usb 1-1: config 0 descriptor??
[  360.514120][ T7829] udevd[7829]: symlink '../../loop5' '/dev/disk/by-diskseq/588.tmp-b7:5' failed: Read-only file system
[  360.555165][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/584.tmp-b7:4' failed: Read-only file system
[  360.666887][T11855] loop5: detected capacity change from 0 to 4096
[  360.685736][T11855] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  360.784912][ T5777] wacom 0003:056A:005D.0026: hidraw0: USB HID vff.fa Device [HID 056a:005d] on usb-dummy_hcd.0-1/input0
[  360.870488][T11855] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  360.893112][T11859] loop4: detected capacity change from 0 to 1024
[  360.902340][T11855] ntfs3: loop5: ino=1f, "file2" failed to open parent directory r=5 to update
[  360.975161][T11859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.995959][ T5777] usb 1-1: USB disconnect, device number 23
[  361.045528][T11859] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.058336][ T4463] ntfs3: loop5: ino=1f, failed to open parent directory r=5 to update
[  361.212685][ T7467] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.578370][T11885] loop4: detected capacity change from 0 to 164
[  361.788580][ T5827] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  361.990462][ T5827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.012411][ T5827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  362.032643][ T5827] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  362.054716][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  362.072064][ T5827] usb 3-1: SerialNumber: syz
[  362.243842][T11904] loop5: detected capacity change from 0 to 2048
[  362.280608][T11904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  362.307256][ T5827] usb 3-1: 0:2 : does not exist
[  362.324181][ T5827] usb 3-1: unit 255 not found!
[  362.379381][ T5827] usb 3-1: USB disconnect, device number 20
[  362.462635][T11908] loop5: detected capacity change from 0 to 128
[  362.527964][ T5777] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  362.722158][ T5777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.748022][ T5777] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  362.768202][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.790948][ T5777] usb 5-1: config 0 descriptor??
[  363.248874][ T5777] lenovo 0003:17EF:6047.0027: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[  363.440085][ T5777] lenovo 0003:17EF:6047.0027: Failed to switch F7/9/11 mode: -71
[  363.468674][ T5777] lenovo 0003:17EF:6047.0027: Failed to switch middle button: -71
[  363.487496][ T5777] lenovo 0003:17EF:6047.0027: Fn-lock setting failed: -71
[  363.493010][T11931] xt_socket: unknown flags 0x50
[  363.506251][ T5777] lenovo 0003:17EF:6047.0027: Sensitivity setting failed: -71
[  363.536256][ T5777] usb 5-1: USB disconnect, device number 20
[  363.692804][T11932] loop5: detected capacity change from 0 to 4096
[  363.746890][T11932] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  363.763210][T11932] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  363.789958][T11932] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  363.824428][T11932] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  363.868673][T11932] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  363.903629][T11932] ntfs: volume version 3.1.
[  363.927547][T11932] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  363.949451][T11932] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  363.969881][T11932] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  363.981379][T11932] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  363.993370][T11932] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  364.407641][ T5827] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  364.511877][T11960] netlink: 'syz.4.2321': attribute type 5 has an invalid length.
[  364.556860][ T5854] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  364.600428][ T5827] usb 1-1: config 0 has an invalid interface number: 153 but max is 0
[  364.618355][ T5827] usb 1-1: config 0 has no interface number 0
[  364.632505][T11962] loop4: detected capacity change from 0 to 1024
[  364.634747][ T5827] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=b4.98
[  364.650733][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.663734][ T5827] usb 1-1: config 0 descriptor??
[  364.676242][ T5827] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  364.706263][T11962] hfsplus: bad catalog entry type
[  364.756881][ T5854] usb 3-1: Using ep0 maxpacket: 8
[  364.779930][ T5854] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  364.780015][   T48] hfsplus: b-tree write err: -5, ino 4
[  364.799378][ T5854] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[  364.816609][ T5854] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[  364.833175][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-diskseq/601.tmp-b7:4' failed: Read-only file system
[  364.837015][ T5854] usb 3-1: config 250 has no interface number 0
[  364.871125][ T5854] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  364.895165][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-diskseq/601.tmp-b7:4' failed: Read-only file system
[  364.906638][ T5854] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  364.906677][ T5854] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  364.906701][ T5854] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  364.986605][ T5854] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  365.026361][ T5854] usb 3-1: config 250 interface 228 has no altsetting 0
[  365.036127][ T7829] udevd[7829]: symlink '../../loop4' '/dev/disk/by-diskseq/602.tmp-b7:4' failed: Read-only file system
[  365.047083][ T5854] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  365.056346][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  365.075775][ T5854] usb 3-1: Product: syz
[  365.081783][ T5854] usb 3-1: SerialNumber: syz
[  365.112902][ T5854] hub 3-1:250.228: bad descriptor, ignoring hub
[  365.130407][ T5854] hub: probe of 3-1:250.228 failed with error -5
[  365.162574][T11966] loop4: detected capacity change from 0 to 4096
[  365.187947][T11966] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  365.201499][T11957] loop5: detected capacity change from 0 to 32768
[  365.304977][ T5827] gspca_vc032x: reg_r err -71
[  365.324179][ T5854] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  365.336229][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.356712][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.362841][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.375698][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.386888][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/603.tmp-b7:4' failed: Read-only file system
[  365.404837][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.411021][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.418304][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  365.430295][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.435647][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.443290][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:4' failed: Read-only file system
[  365.456459][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.461802][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.467701][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.473877][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.496272][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.503392][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.522122][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.546266][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.547335][ T6052] udevd[6052]: symlink '../../loop5' '/dev/disk/by-diskseq/604.tmp-b7:5' failed: Read-only file system
[  365.551700][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.594930][ T6052] udevd[6052]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system
[  365.618213][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.624244][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  365.644186][ T5827] gspca_vc032x: Unknown sensor...
[  365.654379][ T5827] vc032x: probe of 1-1:0.153 failed with error -22
[  365.663275][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/603.tmp-b7:4' failed: Read-only file system
[  365.681210][ T5827] usb 1-1: USB disconnect, device number 24
[  365.691083][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  365.735003][ T5854] usb 3-1: USB disconnect, device number 21
[  365.768896][ T5854] usblp0: removed
[  366.886625][T12008] loop4: detected capacity change from 0 to 2048
[  366.934274][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2346'.
[  366.957786][T12008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  366.965759][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2346'.
[  367.066463][T12008] overlayfs: upper fs needs to support d_type.
[  367.086601][T12008] overlayfs: cleanup of 'work/#7' failed (-2)
[  367.096344][T12008] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  367.099581][    C0] ==================================================================
[  367.104447][T12008] overlayfs: failed to set xattr on upper
[  367.111400][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6b2/0x8d0
[  367.111437][    C0] Read of size 2 at addr ffff88801df68922 by task kworker/u4:3/48
[  367.111456][    C0] 
[  367.111463][    C0] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0
[  367.111482][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  367.111496][    C0] Workqueue: ipv6_addrconf addrconf_dad_work
[  367.111521][    C0] Call Trace:
[  367.111529][    C0]  <IRQ>
[  367.111537][    C0]  dump_stack_lvl+0x16c/0x230
[  367.111564][    C0]  ? __lock_acquire+0x7c80/0x7c80
[  367.111587][    C0]  ? show_regs_print_info+0x20/0x20
[  367.111612][    C0]  ? load_image+0x3b0/0x3b0
[  367.111635][    C0]  ? __virt_addr_valid+0x469/0x540
[  367.111660][    C0]  print_report+0xac/0x220
[  367.111682][    C0]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  367.111706][    C0]  kasan_report+0x117/0x150
[  367.111730][    C0]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  367.111760][    C0]  __xfrm_state_lookup+0x6b2/0x8d0
[  367.111785][    C0]  ? slab_post_alloc_hook+0x8a/0x4d0
[  367.111835][    C0]  ? xfrm_state_lookup+0x1a0/0x1a0
[  367.111866][    C0]  xfrm_state_lookup+0xef/0x1a0
[  367.111892][    C0]  ? xfrm_state_lookup+0x36/0x1a0
[  367.111919][    C0]  xfrm_input+0x3d62/0x6a20
[  367.111950][    C0]  ? xfrm_policy_check+0x296/0x870
[  367.111986][    C0]  tunnel64_rcv+0xd7/0x2c0
[  367.112019][    C0]  ip_protocol_deliver_rcu+0x20e/0x3f0
[  367.112047][    C0]  ? ip_local_deliver_finish+0x1cb/0x510
[  367.123050][T12008] overlayfs: ...falling back to redirect_dir=nofollow.
[  367.125843][    C0]  ip_local_deliver_finish+0x2ca/0x510
[  367.125882][    C0]  NF_HOOK+0x303/0x390
[  367.125909][    C0]  ? NF_HOOK+0x390/0x390
[  367.134404][T12008] overlayfs: ...falling back to index=off.
[  367.136042][    C0]  ? NF_HOOK+0x9b/0x390
[  367.136071][    C0]  ? ip_local_deliver+0x1b0/0x1b0
[  367.136095][    C0]  ? ip_rcv_finish_core+0xd8f/0x1bc0
[  367.136125][    C0]  ? NF_HOOK+0x390/0x390
[  367.143848][T12008] overlayfs: ...falling back to uuid=null.
[  367.153546][    C0]  ? ip_local_deliver+0x122/0x1b0
[  367.153580][    C0]  NF_HOOK+0x303/0x390
[  367.153607][    C0]  ? ip_rcv_core+0xdb0/0xdb0
[  367.325341][    C0]  ? NF_HOOK+0x9b/0x390
[  367.329559][    C0]  ? ip_local_deliver+0x1b0/0x1b0
[  367.334656][    C0]  ? ip_rcv_core+0xdb0/0xdb0
[  367.339304][    C0]  ? ip_local_deliver_finish+0x510/0x510
[  367.345001][    C0]  ? ip_local_deliver_finish+0x510/0x510
[  367.350772][    C0]  __netif_receive_skb+0xcc/0x290
[  367.355860][    C0]  ? process_backlog+0x2be/0x6e0
[  367.360853][    C0]  process_backlog+0x380/0x6e0
[  367.365670][    C0]  ? trigger_rx_softirq+0x60/0x60
[  367.370715][    C0]  ? skb_release_data+0x675/0x800
[  367.375761][    C0]  __napi_poll+0xc0/0x460
[  367.380113][    C0]  ? napi_skb_cache_put+0xfe/0x240
[  367.385244][    C0]  net_rx_action+0x5ea/0xbf0
[  367.389867][    C0]  ? net_tx_action+0x950/0x950
[  367.394666][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  367.400660][    C0]  ? lock_chain_count+0x20/0x20
[  367.405533][    C0]  handle_softirqs+0x280/0x820
[  367.410314][    C0]  ? do_softirq+0xed/0x180
[  367.414736][    C0]  ? do_softirq+0x180/0x180
[  367.419251][    C0]  ? __common_interrupt+0x15b/0x230
[  367.424466][    C0]  ? __dev_queue_xmit+0x245/0x35a0
[  367.429590][    C0]  do_softirq+0xed/0x180
[  367.433844][    C0]  </IRQ>
[  367.436786][    C0]  <TASK>
[  367.439724][    C0]  ? __local_bh_enable_ip+0x1c0/0x1c0
[  367.445103][    C0]  ? lockdep_hardirqs_on_prepare+0x760/0x760
[  367.451094][    C0]  ? rcu_is_watching+0x15/0xb0
[  367.455960][    C0]  __local_bh_enable_ip+0x178/0x1c0
[  367.461196][    C0]  ? _local_bh_enable+0xa0/0xa0
[  367.466060][    C0]  ? __dev_queue_xmit+0x245/0x35a0
[  367.471180][    C0]  __dev_queue_xmit+0x1449/0x35a0
[  367.476234][    C0]  ? neigh_connected_output+0x1ed/0x450
[  367.481818][    C0]  ? __dev_queue_xmit+0x245/0x35a0
[  367.487060][    C0]  ? read_seqbegin+0x1b5/0x260
[  367.491867][    C0]  ? _local_bh_enable+0xa0/0xa0
[  367.496749][    C0]  ? neigh_event_send+0x110/0x110
[  367.501808][    C0]  ? netdev_core_pick_tx+0x340/0x340
[  367.507129][    C0]  ? ___neigh_create+0x1df6/0x2440
[  367.512300][    C0]  ? neigh_connected_output+0x3b0/0x450
[  367.517975][    C0]  ip6_finish_output2+0xe2e/0x1650
[  367.523123][    C0]  ? ip6_finish_output2+0x661/0x1650
[  367.528429][    C0]  ? ip6_mtu+0x7d/0x3f0
[  367.532616][    C0]  ? nf_hook+0x370/0x370
[  367.536874][    C0]  ? ip6_finish_output+0x57b/0x820
[  367.542000][    C0]  NF_HOOK+0x163/0x470
[  367.546094][    C0]  ? mld_send_report+0x2e0/0x2e0
[  367.551059][    C0]  ? NF_HOOK+0x470/0x470
[  367.555328][    C0]  ? icmp6_dst_alloc+0x388/0x400
[  367.560294][    C0]  ? icmp6_dst_alloc+0x388/0x400
[  367.565268][    C0]  mld_sendpack+0x7f9/0xd70
[  367.569810][    C0]  ? mld_sendpack+0x1df/0xd70
[  367.574520][    C0]  ? add_grec+0x1660/0x1660
[  367.579054][    C0]  ? mld_send_initial_cr+0x1b3/0x240
[  367.584366][    C0]  ipv6_mc_dad_complete+0x88/0x210
[  367.589554][    C0]  addrconf_dad_completed+0x6d0/0xd40
[  367.594947][    C0]  ? addrconf_dad_stop+0x430/0x430
[  367.600078][    C0]  addrconf_dad_work+0xc4e/0x14e0
[  367.605116][    C0]  ? ipv6_get_saddr_eval+0xee0/0xee0
[  367.610418][    C0]  ? read_lock_is_recursive+0x20/0x20
[  367.615807][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.621016][    C0]  ? process_scheduled_works+0x957/0x15b0
[  367.626753][    C0]  ? process_scheduled_works+0x957/0x15b0
[  367.632483][    C0]  process_scheduled_works+0xa45/0x15b0
[  367.638067][    C0]  ? assign_work+0x400/0x400
[  367.642689][    C0]  ? assign_work+0x39e/0x400
[  367.647315][    C0]  worker_thread+0xa55/0xfc0
[  367.651940][    C0]  kthread+0x2fa/0x390
[  367.656019][    C0]  ? pr_cont_work+0x560/0x560
[  367.660707][    C0]  ? kthread_blkcg+0xd0/0xd0
[  367.665306][    C0]  ret_from_fork+0x48/0x80
[  367.669739][    C0]  ? kthread_blkcg+0xd0/0xd0
[  367.674349][    C0]  ret_from_fork_asm+0x11/0x20
[  367.679132][    C0]  </TASK>
[  367.682157][    C0] 
[  367.684538][    C0] Allocated by task 10806:
[  367.688952][    C0]  kasan_set_track+0x4e/0x70
[  367.693551][    C0]  __kasan_slab_alloc+0x6c/0x80
[  367.698503][    C0]  slab_post_alloc_hook+0x6e/0x4d0
[  367.703635][    C0]  kmem_cache_alloc+0x11e/0x2e0
[  367.708586][    C0]  xfrm_state_alloc+0x22/0x2a0
[  367.713364][    C0]  __find_acq_core+0x7d8/0x19d0
[  367.718223][    C0]  xfrm_find_acq+0x6a/0x90
[  367.722645][    C0]  xfrm_alloc_userspi+0x57a/0xa90
[  367.727704][    C0]  xfrm_user_rcv_msg+0x596/0x870
[  367.732655][    C0]  netlink_rcv_skb+0x216/0x480
[  367.737429][    C0]  xfrm_netlink_rcv+0x79/0x90
[  367.742121][    C0]  netlink_unicast+0x751/0x8d0
[  367.746894][    C0]  netlink_sendmsg+0x8c1/0xbe0
[  367.751673][    C0]  ____sys_sendmsg+0x5bf/0x950
[  367.756448][    C0]  ___sys_sendmsg+0x220/0x290
[  367.761146][    C0]  __se_sys_sendmsg+0x1a5/0x270
[  367.766012][    C0]  do_syscall_64+0x55/0xb0
[  367.770490][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  367.776401][    C0] 
[  367.778739][    C0] The buggy address belongs to the object at ffff88801df68800
[  367.778739][    C0]  which belongs to the cache xfrm_state of size 848
[  367.792714][    C0] The buggy address is located 290 bytes inside of
[  367.792714][    C0]  freed 848-byte region [ffff88801df68800, ffff88801df68b50)
[  367.806519][    C0] 
[  367.808846][    C0] The buggy address belongs to the physical page:
[  367.815267][    C0] page:ffffea000077da00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801df68400 pfn:0x1df68
[  367.826737][    C0] head:ffffea000077da00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  367.835681][    C0] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  367.843670][    C0] page_type: 0xffffffff()
[  367.848009][    C0] raw: 00fff00000000840 ffff8881406fc3c0 dead000000000122 0000000000000000
[  367.856600][    C0] raw: ffff88801df68400 000000008010000d 00000001ffffffff 0000000000000000
[  367.865182][    C0] page dumped because: kasan: bad access detected
[  367.871594][    C0] page_owner tracks the page as allocated
[  367.877312][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9502, tgid 9499 (syz.0.1385), ts 261624763765, free_ts 260813297265
[  367.897999][    C0]  post_alloc_hook+0x1cd/0x210
[  367.902786][    C0]  get_page_from_freelist+0x195c/0x19f0
[  367.908353][    C0]  __alloc_pages+0x1e3/0x460
[  367.912962][    C0]  alloc_slab_page+0x5d/0x170
[  367.917653][    C0]  new_slab+0x87/0x2e0
[  367.921737][    C0]  ___slab_alloc+0xc6d/0x1300
[  367.926472][    C0]  kmem_cache_alloc+0x1b7/0x2e0
[  367.931334][    C0]  xfrm_state_alloc+0x22/0x2a0
[  367.936110][    C0]  xfrm_add_sa+0xfe5/0x30a0
[  367.940622][    C0]  xfrm_user_rcv_msg+0x596/0x870
[  367.945565][    C0]  netlink_rcv_skb+0x216/0x480
[  367.950340][    C0]  xfrm_netlink_rcv+0x79/0x90
[  367.955030][    C0]  netlink_unicast+0x751/0x8d0
[  367.959816][    C0]  netlink_sendmsg+0x8c1/0xbe0
[  367.964593][    C0]  ____sys_sendmsg+0x5bf/0x950
[  367.969370][    C0]  ___sys_sendmsg+0x220/0x290
[  367.974062][    C0] page last free stack trace:
[  367.978740][    C0]  free_unref_page_prepare+0x7ce/0x8e0
[  367.984215][    C0]  free_unref_page+0x32/0x2e0
[  367.988903][    C0]  __stack_depot_save+0x572/0x630
[  367.993933][    C0]  kasan_set_track+0x5f/0x70
[  367.998531][    C0]  __kasan_kmalloc+0x8f/0xa0
[  368.003128][    C0]  __kmalloc_node+0xb4/0x230
[  368.007728][    C0]  crypto_create_tfm_node+0x7b/0x3b0
[  368.013025][    C0]  crypto_spawn_tfm2+0x5c/0x90
[  368.017796][    C0]  crypto_authenc_init_tfm+0x48/0x220
[  368.023174][    C0]  crypto_create_tfm_node+0x15c/0x3b0
[  368.028557][    C0]  crypto_alloc_tfm_node+0x176/0x330
[  368.033860][    C0]  esp_init_state+0x5a7/0x11b0
[  368.038642][    C0]  __xfrm_init_state+0xd8b/0x11c0
[  368.043681][    C0]  xfrm_add_sa+0x236d/0x30a0
[  368.048297][    C0]  xfrm_user_rcv_msg+0x596/0x870
[  368.053245][    C0]  netlink_rcv_skb+0x216/0x480
[  368.058022][    C0] 
[  368.060351][    C0] Memory state around the buggy address:
[  368.065983][    C0]  ffff88801df68800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.074049][    C0]  ffff88801df68880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.082118][    C0] >ffff88801df68900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.090205][    C0]                                ^
[  368.095324][    C0]  ffff88801df68980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.103393][    C0]  ffff88801df68a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.111456][    C0] ==================================================================
[  368.119702][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  368.126917][    C0] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0
[  368.134339][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  368.144434][    C0] Workqueue: ipv6_addrconf addrconf_dad_work
[  368.150468][    C0] Call Trace:
[  368.153775][    C0]  <IRQ>
[  368.156656][    C0]  dump_stack_lvl+0x16c/0x230
[  368.161385][    C0]  ? show_regs_print_info+0x20/0x20
[  368.166727][    C0]  ? load_image+0x3b0/0x3b0
[  368.171282][    C0]  panic+0x2c0/0x710
[  368.175287][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  368.179852][    C0]  ? _raw_spin_unlock_irqrestore+0xa9/0x110
[  368.185794][    C0]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  368.191731][    C0]  ? _raw_spin_unlock+0x40/0x40
[  368.196633][    C0]  ? print_memory_metadata+0x314/0x400
[  368.202140][    C0]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  368.207477][    C0]  check_panic_on_warn+0x84/0xa0
[  368.212468][    C0]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  368.217800][    C0]  end_report+0x6f/0x140
[  368.222093][    C0]  kasan_report+0x128/0x150
[  368.226651][    C0]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  368.231997][    C0]  __xfrm_state_lookup+0x6b2/0x8d0
[  368.237159][    C0]  ? slab_post_alloc_hook+0x8a/0x4d0
[  368.242589][    C0]  ? xfrm_state_lookup+0x1a0/0x1a0
[  368.247760][    C0]  xfrm_state_lookup+0xef/0x1a0
[  368.252654][    C0]  ? xfrm_state_lookup+0x36/0x1a0
[  368.257698][    C0]  xfrm_input+0x3d62/0x6a20
[  368.262220][    C0]  ? xfrm_policy_check+0x296/0x870
[  368.267354][    C0]  tunnel64_rcv+0xd7/0x2c0
[  368.271789][    C0]  ip_protocol_deliver_rcu+0x20e/0x3f0
[  368.277349][    C0]  ? ip_local_deliver_finish+0x1cb/0x510
[  368.283005][    C0]  ip_local_deliver_finish+0x2ca/0x510
[  368.288481][    C0]  NF_HOOK+0x303/0x390
[  368.292593][    C0]  ? NF_HOOK+0x390/0x390
[  368.296855][    C0]  ? NF_HOOK+0x9b/0x390
[  368.301024][    C0]  ? ip_local_deliver+0x1b0/0x1b0
[  368.306056][    C0]  ? ip_rcv_finish_core+0xd8f/0x1bc0
[  368.311352][    C0]  ? NF_HOOK+0x390/0x390
[  368.315618][    C0]  ? ip_local_deliver+0x122/0x1b0
[  368.320656][    C0]  NF_HOOK+0x303/0x390
[  368.324735][    C0]  ? ip_rcv_core+0xdb0/0xdb0
[  368.329340][    C0]  ? NF_HOOK+0x9b/0x390
[  368.333508][    C0]  ? ip_local_deliver+0x1b0/0x1b0
[  368.338549][    C0]  ? ip_rcv_core+0xdb0/0xdb0
[  368.343155][    C0]  ? ip_local_deliver_finish+0x510/0x510
[  368.348801][    C0]  ? ip_local_deliver_finish+0x510/0x510
[  368.354448][    C0]  __netif_receive_skb+0xcc/0x290
[  368.359492][    C0]  ? process_backlog+0x2be/0x6e0
[  368.364454][    C0]  process_backlog+0x380/0x6e0
[  368.369257][    C0]  ? trigger_rx_softirq+0x60/0x60
[  368.374301][    C0]  ? skb_release_data+0x675/0x800
[  368.379352][    C0]  __napi_poll+0xc0/0x460
[  368.383707][    C0]  ? napi_skb_cache_put+0xfe/0x240
[  368.388839][    C0]  net_rx_action+0x5ea/0xbf0
[  368.393450][    C0]  ? net_tx_action+0x950/0x950
[  368.398231][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  368.404223][    C0]  ? lock_chain_count+0x20/0x20
[  368.409094][    C0]  handle_softirqs+0x280/0x820
[  368.413965][    C0]  ? do_softirq+0xed/0x180
[  368.418431][    C0]  ? do_softirq+0x180/0x180
[  368.422946][    C0]  ? __common_interrupt+0x15b/0x230
[  368.428172][    C0]  ? __dev_queue_xmit+0x245/0x35a0
[  368.433297][    C0]  do_softirq+0xed/0x180
[  368.437549][    C0]  </IRQ>
[  368.440491][    C0]  <TASK>
[  368.443427][    C0]  ? __local_bh_enable_ip+0x1c0/0x1c0
[  368.448808][    C0]  ? lockdep_hardirqs_on_prepare+0x760/0x760
[  368.454888][    C0]  ? rcu_is_watching+0x15/0xb0
[  368.459672][    C0]  __local_bh_enable_ip+0x178/0x1c0
[  368.464883][    C0]  ? _local_bh_enable+0xa0/0xa0
[  368.469745][    C0]  ? __dev_queue_xmit+0x245/0x35a0
[  368.474875][    C0]  __dev_queue_xmit+0x1449/0x35a0
[  368.479925][    C0]  ? neigh_connected_output+0x1ed/0x450
[  368.485568][    C0]  ? __dev_queue_xmit+0x245/0x35a0
[  368.490696][    C0]  ? read_seqbegin+0x1b5/0x260
[  368.495472][    C0]  ? _local_bh_enable+0xa0/0xa0
[  368.500339][    C0]  ? neigh_event_send+0x110/0x110
[  368.505379][    C0]  ? netdev_core_pick_tx+0x340/0x340
[  368.510677][    C0]  ? ___neigh_create+0x1df6/0x2440
[  368.515802][    C0]  ? neigh_connected_output+0x3b0/0x450
[  368.521367][    C0]  ip6_finish_output2+0xe2e/0x1650
[  368.526584][    C0]  ? ip6_finish_output2+0x661/0x1650
[  368.531886][    C0]  ? ip6_mtu+0x7d/0x3f0
[  368.536061][    C0]  ? nf_hook+0x370/0x370
[  368.540334][    C0]  ? ip6_finish_output+0x57b/0x820
[  368.545470][    C0]  NF_HOOK+0x163/0x470
[  368.549563][    C0]  ? mld_send_report+0x2e0/0x2e0
[  368.554524][    C0]  ? NF_HOOK+0x470/0x470
[  368.558784][    C0]  ? icmp6_dst_alloc+0x388/0x400
[  368.563743][    C0]  ? icmp6_dst_alloc+0x388/0x400
[  368.568698][    C0]  mld_sendpack+0x7f9/0xd70
[  368.573231][    C0]  ? mld_sendpack+0x1df/0xd70
[  368.577936][    C0]  ? add_grec+0x1660/0x1660
[  368.582509][    C0]  ? mld_send_initial_cr+0x1b3/0x240
[  368.587817][    C0]  ipv6_mc_dad_complete+0x88/0x210
[  368.592950][    C0]  addrconf_dad_completed+0x6d0/0xd40
[  368.598361][    C0]  ? addrconf_dad_stop+0x430/0x430
[  368.603523][    C0]  addrconf_dad_work+0xc4e/0x14e0
[  368.608582][    C0]  ? ipv6_get_saddr_eval+0xee0/0xee0
[  368.613888][    C0]  ? read_lock_is_recursive+0x20/0x20
[  368.619281][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.624494][    C0]  ? process_scheduled_works+0x957/0x15b0
[  368.630235][    C0]  ? process_scheduled_works+0x957/0x15b0
[  368.635973][    C0]  process_scheduled_works+0xa45/0x15b0
[  368.641542][    C0]  ? assign_work+0x400/0x400
[  368.646150][    C0]  ? assign_work+0x39e/0x400
[  368.650758][    C0]  worker_thread+0xa55/0xfc0
[  368.655369][    C0]  kthread+0x2fa/0x390
[  368.659446][    C0]  ? pr_cont_work+0x560/0x560
[  368.664134][    C0]  ? kthread_blkcg+0xd0/0xd0
[  368.668730][    C0]  ret_from_fork+0x48/0x80
[  368.673174][    C0]  ? kthread_blkcg+0xd0/0xd0
[  368.677788][    C0]  ret_from_fork_asm+0x11/0x20
[  368.682598][    C0]  </TASK>
[  368.685910][    C0] Kernel Offset: disabled
[  368.690278][    C0] Rebooting in 86400 seconds..