last executing test programs:

3.45984807s ago: executing program 1 (id=9713):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40})

3.45922146s ago: executing program 4 (id=9715):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000200", 0x33a)

3.162456767s ago: executing program 2 (id=9717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)

3.01179759s ago: executing program 1 (id=9718):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x70bd27, 0xffffffff, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0xa, 0x100}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x11, 0x0, 0x4000800}, 0x800)

2.974734812s ago: executing program 4 (id=9720):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000001980)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=cp1251,iocharset=cp850,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00@'], 0x4, 0x339, &(0x7f0000000140)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40)

2.735204595s ago: executing program 2 (id=9722):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x8)

2.734863895s ago: executing program 0 (id=9723):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x24}}, 0x4040)

2.681218756s ago: executing program 1 (id=9724):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000002040)=0x2, 0x12)

2.355225541s ago: executing program 2 (id=9726):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00')
openat(r0, &(0x7f0000001240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141140, 0x100)

2.354885013s ago: executing program 0 (id=9727):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x80045530, 0xffffffffffffffff)

2.349794697s ago: executing program 1 (id=9728):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa64136e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000580)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNCkOTQiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5ks2nS7iHd9v2CdifPfGfmOewzz7M7zwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEinnjrZ2WVbnQsAANBIg6Mjnd2M/wAA3FXO8/kfAADgbmJy9L1MfSMFG/D+Lkqezc1dWh7r6698WJt5R7Z48e6/ZFd3z6HDR44eC15vfHyt3aNzo+dPZk7Pzy4sZvP57GRmbC43MT+Z3fQZqj2+3AGvAjKzFy9NTk3lM90He1btXk7/0rqtI917tOOEE8SO9fX3j0ZiYvFbvvoa683wE3K0T6bfHvrUBiU5qr4uNnjv1FubV4gDXiHG+vq9gszkxueW3J1DQUU4fll9iaCOGtAWVWmX3HxZojaf2eJydEKmjp8Ldk5SS1APj3pfDK9/YKwml79lbj6fl/SAmqDNbmOtcvSjTLM7khra+mZFg8XkaFmmP3oLNuzdD9z+5N42zz6TeXpuaj4SO2R+j2r28aGRbvN7U1KOBr07fsFGtjozaDh3svSWTHs+ftmbV8ibl+7oPfrEcE90hrF3g/O4sQf9+eNmxuS4HztkQ2ZO7csFAAAAAAAAQGo1R9/JVPgqEyamTU7kkXFSxQdDma3JIoB6MUdvyzQ8UvC+ho+uS2mJrO8pafZnf/XNf1vy9PzCymJu+qWlivtTyZMv5pcWxycq71abe59tiaZstI6lSnFzlJDpuT8/stJ1i/d/fylAmJsPnwzXzCTLr++9b/5fXM8UPEM6fmFvdLtilm/i+ah7TTNHSzKd2rXPX6uS0po6UzHuc5l+f2+/H+ck3MwHp00XzziVm8l2urFfy/T+v0GstyxK2/zY3WFslxtrMr05sDp2ux/bHsZ2u7H9Ml1/oXLsnjC2x419XaaFXzNBbMqNvc+P7QhjD07Mz0xWqkrgZrn9/yeZ3m3PWNA3YsX339r+/0o4FlwpP9E6fb7a/p+OpF3x+/UFt///tc/ry17/dyr3/zdk+uSL/X5cse8l/P07vf/D/v+sTNPfro5N+bG7wtiuTVdsk3Dbf79MZ/ZcK9WN3/5+C4StFm3/e8vfHXVq/52RtLR/3dbaFB2S8iuXL47PzGQX2WCDDTZKG1t9Z0IjuOP/Z+4s6ssfSvMdf/z3P6aEM6u/Xw3H/97yE9Vp/N8VSev1ZyPxmJRcml2I75WS+ZXLj+Vmx6ez09m5Q51HOg8fOt51/Fg8EUzuwq2q6+pO5Lb/NzL9s+1q6fPu6vlf5fl/qvxEdWr/3ZG01Kr5StVFh9/+V2W6//q10vcSN5r/B9//PPJg8bXUP+vU/u2RtLR/3f/VpugAAAAAAAAAAAAAAAAA0NTi5ugDmc48HrPgt2abWf+35gdodVr/1RFJm2zQ7xWqrlQAaAKOHL0j08Mq2GtuwnZpIPqKO9p/AQAA//9HASOO")
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0)

2.303890658s ago: executing program 4 (id=9729):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
read$FUSE(r0, &(0x7f00000054c0)={0x2020}, 0x2020)

2.137505697s ago: executing program 5 (id=9730):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x2f, 0x0, 0x2, 0x9}, 0x8)

2.123789491s ago: executing program 0 (id=9731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

1.99708962s ago: executing program 2 (id=9732):
r0 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x9, @raw_data="a4cabd7ecdd784ddc7fb45be22a722251281e35d3c4357d9f58bced7afe77e04753c332211a3210d242ef3308c9ef66989e88b74e40aa2954b3d8b36f7f5eb6cdcade2fbee0c9f74dcf08178d98f28d786fb56e24b1e3481c285a81f776d09da05ec4ad692f5a28521143968f2a4fb82da6bb35cc38b27cadd07f0d27b460348cd1d1fddae64c7ff3392680afa2db214529ef8b8d0738b552335653a334b97709ee832795798a96cba4b3087036e72eb773337631be62558cadb8793cb590d370afcd206a125e1d2"})

1.858427898s ago: executing program 5 (id=9734):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x400)
lseek(r0, 0x3, 0x0)

1.857965125s ago: executing program 1 (id=9735):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="1800000078000106000000000000000007"], 0x18}], 0x1}, 0x0)

1.857755453s ago: executing program 4 (id=9736):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="ed", 0x1}], 0x1)

1.83547386s ago: executing program 0 (id=9737):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0)

1.692843891s ago: executing program 5 (id=9738):
r0 = syz_open_dev$radio(&(0x7f0000000640), 0x0, 0x2)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

1.601433514s ago: executing program 2 (id=9739):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904"], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4b, 0x24, 0xd0, 0x20, 0xa2c, 0x8, 0xc7b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0}}]}}, 0x0)

1.514779491s ago: executing program 4 (id=9740):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,noquota,nointegrity,errors=continue,iocharset=cp863,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,uid=', @ANYRESHEX=0xee01, @ANYBLOB="0000bbaa213ca1750a73593e8b6b51ec762e74cada46036fb2cd30b777e4a35afadbbd049c95b9880c70e694709bce9011b4c0460c95d9e0cc473d9f4f1841cdaff7b2a25ff3baddc86b3ab69e93b6beea217b6ff816e2f122cb63010bce65149c059d20b376f3696de010eb1b9ca12fc97b85d273e059e8c625da1575d7ac7d39571c4447ebadc4da39b8bcdf520b21994c5b02d448852f9765d56ffcedca0ad05a7fd150d8028a6997510bf1bf9871f25c4ab5966143ab5fbf218f99d125b00c5ebf68a5ad9dd56d7a"], 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12e1013, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

1.510515203s ago: executing program 1 (id=9741):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x3, 0x101})

1.45523174s ago: executing program 0 (id=9742):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.219459913s ago: executing program 3 (id=9744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

1.169635471s ago: executing program 0 (id=9745):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

995.000332ms ago: executing program 5 (id=9746):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map=r0, 0x5, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

994.675161ms ago: executing program 3 (id=9747):
r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x703, 0x0)

834.318853ms ago: executing program 3 (id=9748):
r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4000)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2)

779.112499ms ago: executing program 5 (id=9749):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x800402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=iso8859-15,iocharset=iso8859-4,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,iocharset=cp737,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB="0000536dcef25dae4d9893271343988e0ad734abbf80ceb92c02603002cf90dbd94b5c5bf0f52b30dc74d2946af121d6373cd8925ccba65fadecb8b356"], 0x1, 0x151e, &(0x7f0000007640)="$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")
mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

500.451804ms ago: executing program 3 (id=9750):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x0, 0x1, 0x6})

298.682579ms ago: executing program 3 (id=9751):
r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000), 0x0)

272.510406ms ago: executing program 5 (id=9752):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214)

39.425384ms ago: executing program 4 (id=9753):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x20, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})

39.122004ms ago: executing program 2 (id=9754):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x140, &(0x7f0000000440)="$eJzs2r9Kw1AUBvCjFoQ+glMhAauQ/1oHd0Fw8gkMbZIGb7wlEaSdiquD4nAdHV3dRDcfIbNPoG/gdCVtam3uKNVCv99yDz2Xr0mGMx0j5YkTZgbR1vD2+H015Umj5e21Qyf0aeyQiBpFkUt5Z5Li5Lufy6GpXNBeyrMZiaPnMGaBq2YAAAAAAAAAAAAAAAAAAAAAACwJ7aMs6l3BH8KYBc6PbtYfnPqMBWk2+UWnckeHtu/5fnHfm8lr1oj00f5OLA4ui74909cnSZtdwVeq/2edJz0r6w+MOPGjIArOXNdr2Tu2vetaoyyrmqjflM9EuXzqqftE+uN0n+jNVveJqD4+ahuxuL6opk/fH8W8iiuaQ/KnlPJ3OXJtQb4PikUsqvODOuue9lrMD7PNWecP54cy0QD+yVcAAAD//wP3OlI=")
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x100)

0s ago: executing program 3 (id=9755):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ng ssd optimizations
[  768.017561][T24772] BTRFS info (device loop4): turning on async discard
[  768.024617][T24772] BTRFS info (device loop4): enabling free space tree
[  768.029098][T24833] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  768.094548][T24833] hpfs: filesystem error: improperly stopped
[  768.100947][T24833] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  768.108731][T24833] hpfs: You really don't want any checks? You are crazy...
[  768.117265][T24833] hpfs: hpfs_map_sector(): read error
[  768.124807][T24833] hpfs: code page support is disabled
[  768.133972][T24833] hpfs: hpfs_map_4sectors(): unaligned read
[  768.153367][T24833] hpfs: hpfs_map_4sectors(): unaligned read
[  768.159373][T24833] hpfs: filesystem error: unable to find root dir
[  768.377563][ T5634] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  768.942048][T24855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  768.956900][T24856] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  769.003616][T24859] hmac(sha224): entered promiscuous mode
[  769.047524][   T30] audit: type=1800 audit(769.015:196): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8262" name="file1" dev="loop1" ino=1367 res=0 errno=0
[  769.351389][T24865] EXT4-fs: Ignoring removed nobh option
[  769.407026][T24865] EXT4-fs error (device loop4): ext4_iget_extra_inode:5127: inode #15: comm syz.4.8267: corrupted in-inode xattr: overlapping e_value 
[  769.480403][T24874] tmpfs: Bad value for 'mpol'
[  769.551766][T24865] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  769.553548][T24865] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.8267: couldn't read orphan inode 15 (err -117)
[  769.562776][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  769.562810][    C0] EXT4-fs (loop4): initial error at time 769: ext4_iget_extra_inode:5127: inode 15
[  769.562864][    C0] EXT4-fs (loop4): last error at time 769: ext4_iget_extra_inode:5127: inode 15
[  769.629705][T24879] set_capacity_and_notify: 3 callbacks suppressed
[  769.629732][T24879] loop5: detected capacity change from 0 to 512
[  769.720600][T24865] loop4: lost filesystem error report for type 5 error -117
[  769.732524][T24865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  769.803294][T24879] tmpfs: Bad value for 'mpol'
[  769.977658][T24887] loop1: detected capacity change from 0 to 512
[  770.011680][T24887] EXT4-fs: Ignoring removed nomblk_io_submit option
[  770.135530][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  770.141852][T24887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  770.148047][T24891] loop5: detected capacity change from 0 to 512
[  770.218773][T24891] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8278: bad orphan inode 13
[  770.331372][T24891] loop5: lost filesystem error report for type 5 error -117
[  770.331842][T24891] ext4_test_bit(bit=12, block=4) = 1
[  770.344492][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  770.344526][    C0] EXT4-fs (loop5): initial error at time 770: ext4_orphan_get:1423
[  770.344569][    C0] EXT4-fs (loop5): last error at time 770: ext4_orphan_get:1423
[  770.428631][T24891] is_bad_inode(inode)=0
[  770.438147][ T5638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  770.460953][T24891] NEXT_ORPHAN(inode)=0
[  770.465058][T24891] max_ino=32
[  770.505779][T24891] i_nlink=1
[  770.519366][T24891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  770.666234][T24891] EXT4-fs warning (device loop5): dx_probe:812: inode #2: comm syz.5.8278: Hash code is SIPHASH, but hash not in dirent
[  770.729638][T24891] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.8278: Corrupt directory, running e2fsck is recommended
[  770.792181][T24891] EXT4-fs warning (device loop5): dx_probe:812: inode #2: comm syz.5.8278: Hash code is SIPHASH, but hash not in dirent
[  770.853401][T24891] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.8278: Corrupt directory, running e2fsck is recommended
[  770.908139][T24891] EXT4-fs error (device loop5): ext4_find_dest_de:2049: inode #2: block 13: comm syz.5.8278: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0
[  771.211847][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.009626][   T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  772.145361][T24947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8303'.
[  772.185708][T24947] netlink: 'syz.3.8303': attribute type 1 has an invalid length.
[  772.207159][   T10] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  772.220654][T24919] loop1: detected capacity change from 0 to 32768
[  772.232703][T24947] netlink: 'syz.3.8303': attribute type 2 has an invalid length.
[  772.241204][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.259118][T24947] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8303'.
[  772.275674][   T10] usb 1-1: Product: syz
[  772.287628][   T10] usb 1-1: Manufacturer: syz
[  772.295000][T24919] 
[  772.295000][T24919]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  772.295000][T24919] 
[  772.308810][   T10] usb 1-1: SerialNumber: syz
[  772.344819][   T10] usb 1-1: config 0 descriptor??
[  772.362276][T24919] ERROR: (device loop1): diWrite: ixpxd invalid
[  772.362276][T24919] 
[  772.384179][   T10] hub 1-1:0.0: bad descriptor, ignoring hub
[  772.398536][   T10] hub 1-1:0.0: probe with driver hub failed with error -5
[  772.409315][T24919] ERROR: (device loop1): txAbort: 
[  772.409315][T24919] 
[  772.434970][   T10] usbsevseg 1-1:0.0: USB 7 Segment device now attached
[  772.506174][T24925] loop2: detected capacity change from 0 to 32768
[  772.602017][ T5638] 
[  772.602017][ T5638]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  772.602017][ T5638] 
[  772.636371][ T5638] 
[  772.636371][ T5638]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  772.636371][ T5638] 
[  772.759921][T17079] usb 1-1: USB disconnect, device number 35
[  772.825623][T17079] usbsevseg 1-1:0.0: USB 7 Segment now disconnected
[  773.425343][T24977] netlink: 'syz.2.8318': attribute type 1 has an invalid length.
[  773.463668][T24977] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8318'.
[  773.485350][T24980] loop5: detected capacity change from 0 to 512
[  773.532373][T24980] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  773.577673][T24980] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  773.634266][T24980] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  773.745376][T24980] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  773.790062][T24980] System zones: 0-2, 18-18, 34-35
[  773.860796][T24980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  774.012371][T24997] loop4: detected capacity change from 0 to 256
[  774.042564][T24997] exfat: Deprecated parameter 'namecase'
[  774.061522][T24980] fscrypt (loop5, inode 12): Error -61 getting encryption context
[  774.075876][T24997] exfat: Deprecated parameter 'namecase'
[  774.094994][T24997] exfat: Deprecated parameter 'utf8'
[  774.157045][T24997] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  774.296702][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  774.439259][T25007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8333'.
[  774.554609][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8335'.
[  774.589183][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8335'.
[  774.703219][T24975] loop1: detected capacity change from 0 to 32768
[  774.781126][T24975] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  774.843405][T24975] JBD2: Ignoring recovery information on journal
[  775.024095][T24975] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  775.099594][ T5757] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  775.280566][ T5757] usb 3-1: Using ep0 maxpacket: 32
[  775.302550][ T5757] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  775.328388][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.385168][ T5757] gspca_main: nw80x-2.14.0 probing 055f:d001
[  775.480332][ T5638] ocfs2: Unmounting device (7,1) on (node local)
[  775.547383][T25041] netlink: 'syz.4.8348': attribute type 21 has an invalid length.
[  775.581884][ T5757] gspca_nw80x: reg_w err -71
[  775.595038][ T5757] nw80x 3-1:3.0: probe with driver nw80x failed with error -71
[  775.620332][ T5757] usb 3-1: USB disconnect, device number 36
[  776.113218][T25053] loop0: detected capacity change from 0 to 1024
[  776.128012][T25056] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  776.139811][T25057] loop1: detected capacity change from 0 to 128
[  776.186476][T25057] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  776.208860][T25053] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5
[  776.220342][T25053] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  776.237776][T25053] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.8355: Failed to acquire dquot type 0
[  776.282184][T25053] loop0: lost filesystem error report for type 5 error -117
[  776.287004][T25053] EXT4-fs error (device loop0): mb_free_blocks:2046: group 0, 
[  776.294415][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  776.294450][    C1] EXT4-fs (loop0): initial error at time 776: ext4_acquire_dquot:7032
[  776.294494][    C1] EXT4-fs (loop0): last error at time 776: ext4_acquire_dquot:7032
[  776.326885][T25053] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  776.360059][T25053] EXT4-fs (loop0): 1 truncate cleaned up
[  776.417101][T25053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  776.475099][ T5638] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  776.536370][T25065] netlink: 412 bytes leftover after parsing attributes in process `syz.2.8359'.
[  776.568685][T25053] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5
[  776.589686][T25053] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  776.674814][T25053] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.8355: Failed to acquire dquot type 0
[  776.893969][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  777.127931][T25080] loop4: detected capacity change from 0 to 256
[  777.188999][T25080] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  777.820152][T17276] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  777.902805][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8382'.
[  777.909712][T17079] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  777.995421][T17276] usb 5-1: config 0 has an invalid interface number: 99 but max is 0
[  778.019095][T17276] usb 5-1: config 0 has no interface number 0
[  778.046180][T17276] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  778.076737][T17276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.089674][T17079] usb 4-1: Using ep0 maxpacket: 32
[  778.108650][T17276] usb 5-1: Product: syz
[  778.111452][T17079] usb 4-1: unable to get BOS descriptor or descriptor too short
[  778.127503][T17276] usb 5-1: Manufacturer: syz
[  778.136672][T17079] usb 4-1: config 7 has an invalid interface number: 187 but max is 0
[  778.146534][T17276] usb 5-1: SerialNumber: syz
[  778.166686][T17079] usb 4-1: config 7 has no interface number 0
[  778.185094][T17276] usb 5-1: config 0 descriptor??
[  778.186555][T17079] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  778.218213][T17079] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0
[  778.243554][T17079] usb 4-1: config 7 interface 187 has no altsetting 0
[  778.254499][T17079] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  778.290658][T17079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.313962][T17079] usb 4-1: Product: syz
[  778.319141][T17079] usb 4-1: Manufacturer: syz
[  778.326288][T17079] usb 4-1: SerialNumber: syz
[  778.419668][ T5757] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[  778.463323][T17276] usb 5-1: USB disconnect, device number 34
[  778.566917][T25131] sg_write: data in/out 196864/4 bytes for SCSI command 0x2-- guessing data in;
[  778.566917][T25131]    program syz.1.8392 not setting count and/or reply_len properly
[  778.613055][ T5757] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  778.622888][T17079] usb 4-1: Unknown endpoint type found, address 0x07
[  778.633328][ T5757] usb 3-1: config 0 has no interface number 0
[  778.645117][T17079] usb 4-1: Not enough endpoints found in device, aborting!
[  778.667977][ T5757] usb 3-1: config 0 interface 41 has no altsetting 0
[  778.702117][ T5757] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  778.722706][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.751183][ T5757] usb 3-1: Product: syz
[  778.757990][ T5757] usb 3-1: Manufacturer: syz
[  778.772602][ T5757] usb 3-1: SerialNumber: syz
[  778.814891][ T5757] usb 3-1: config 0 descriptor??
[  778.893874][T17079] usb 4-1: USB disconnect, device number 28
[  779.147227][T25129] loop5: detected capacity change from 0 to 32768
[  779.170524][T25129] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8391 (25129)
[  779.213150][T25129] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  779.255224][T25129] BTRFS info (device loop5): using sha256 checksum algorithm
[  779.278004][ T5757] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  779.311584][ T5757] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[  779.364553][ T5757] usb 3-1: USB disconnect, device number 37
[  779.397294][T25129] BTRFS info (device loop5): enabling ssd optimizations
[  779.414914][T25129] BTRFS info (device loop5): turning on async discard
[  779.444819][T25129] BTRFS info (device loop5): enabling free space tree
[  779.725892][ T5622] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  779.780437][T17079] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  779.950683][T17079] usb 5-1: Using ep0 maxpacket: 16
[  779.988253][T17079] usb 5-1: unable to get BOS descriptor or descriptor too short
[  780.055240][T17079] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  780.082895][T17079] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  780.142858][T17079] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  780.175464][T17079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.212281][T17079] usb 5-1: Product: syz
[  780.231611][T17079] usb 5-1: Manufacturer: syz
[  780.254722][T17079] usb 5-1: SerialNumber: syz
[  780.311863][T25182] loop5: detected capacity change from 0 to 4096
[  780.423894][T25191] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  780.566042][T17079] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  780.615865][T17079] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  780.682607][T17079] usb 5-1: 2:1 : no cluster descriptor
[  780.821658][T17079] usb 5-1: USB disconnect, device number 35
[  780.964123][ T8824] udevd[8824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  781.834047][T25228] netlink: 'syz.4.8431': attribute type 1 has an invalid length.
[  781.845437][T25229] dlm: no locking on control device
[  781.988813][T25193] loop2: detected capacity change from 0 to 32768
[  782.110442][ T5757] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  782.135535][T25238] loop4: detected capacity change from 0 to 1024
[  782.159982][T25239] loop0: detected capacity change from 0 to 512
[  782.277888][T25239] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  782.320239][T25239] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  782.333435][ T5757] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  782.366330][ T5757] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  782.397476][T25239] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  782.423419][ T5757] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  782.445138][T25239] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  782.468077][T25239] System zones: 0-2, 18-18, 34-35
[  782.497795][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.551563][T25239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  782.617154][ T5757] hub 4-1:4.0: USB hub found
[  782.638604][T25239] fscrypt (loop0, inode 12): Error -61 getting encryption context
[  782.815240][ T5757] hub 4-1:4.0: 4 ports detected
[  782.830992][ T5757] usb 4-1: selecting invalid altsetting 1
[  782.841592][ T5757] hub 4-1:4.0: Using single TT (err -22)
[  782.867806][ T5757] hub 4-1:4.0: insufficient power available to use all downstream ports
[  782.900794][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  783.024093][ T5757] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  783.056829][ T5757] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  783.160621][ T5757] usb 4-1: USB disconnect, device number 29
[  783.500462][T25268] loop1: detected capacity change from 0 to 4096
[  783.543987][T25268] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  783.637888][T25268] ntfs3(loop1): ino=19, mi_enum_attr
[  783.667788][T25268] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  784.142120][T25297] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  784.737831][T25309] netlink: 'syz.1.8470': attribute type 3 has an invalid length.
[  784.752517][T25312] SET target dimension over the limit!
[  785.077060][T25327] openvswitch: netlink: Duplicate or invalid key (type 0).
[  785.103546][T25327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  785.128340][T25287] loop3: detected capacity change from 0 to 32768
[  785.204682][T25321] loop4: detected capacity change from 0 to 4096
[  785.296966][T25287] ea_get: invalid extended attribute
[  785.324401][T25330] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  785.352654][T25287] ffff8880574d0318: 04 00 00 00                                      ....
[  786.938832][T25379] loop4: detected capacity change from 0 to 256
[  786.949781][  T802] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  787.021788][T25379] FAT-fs (loop4): Directory bread(block 64) failed
[  787.032985][T25379] FAT-fs (loop4): Directory bread(block 65) failed
[  787.046712][T25379] FAT-fs (loop4): Directory bread(block 66) failed
[  787.077324][T25379] FAT-fs (loop4): Directory bread(block 67) failed
[  787.095087][T25379] FAT-fs (loop4): Directory bread(block 68) failed
[  787.110029][T25379] FAT-fs (loop4): Directory bread(block 69) failed
[  787.116108][  T802] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  787.126915][T25379] FAT-fs (loop4): Directory bread(block 70) failed
[  787.136933][T25379] FAT-fs (loop4): Directory bread(block 71) failed
[  787.143673][  T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.149809][T25379] FAT-fs (loop4): Directory bread(block 72) failed
[  787.169281][T25379] FAT-fs (loop4): Directory bread(block 73) failed
[  787.176331][  T802] usb 3-1: config 0 descriptor??
[  787.192647][  T802] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  787.621773][  T802] gp8psk: usb out operation failed.
[  787.627050][  T802] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  787.644689][  T802] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  787.671608][  T802] usb 3-1: USB disconnect, device number 38
[  790.090390][T25389] netlink: 'syz.4.8508': attribute type 12 has an invalid length.
[  790.124009][T25407] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  790.310751][T25412] openvswitch: netlink: Tunnel attr 148 out of range max 16
[  791.256503][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8539'.
[  791.546914][T25461] loop3: detected capacity change from 0 to 164
[  791.646329][T25422] loop4: detected capacity change from 0 to 32768
[  791.775762][T25422] dmapctl: invalid leafidx 1365 (expected 341)
[  791.792484][T25422] ERROR: (device loop4): dbAllocAG: Corrupt dmapctl page
[  791.792484][T25422] 
[  791.842716][T25422] ERROR: (device loop4): remounting filesystem as read-only
[  791.877155][T25422] jfs_mkdir: dtInsert returned -EIO
[  791.908817][T25422] ERROR: (device loop4): txAbort: 
[  791.908817][T25422] 
[  791.973706][T25472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8550'.
[  792.941883][   T30] audit: type=1800 audit(792.905:197): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.8561" name="/newroot/1433/file0" dev="tmpfs" ino=7335 res=0 errno=0
[  793.117472][T25512] loop3: detected capacity change from 0 to 256
[  793.207094][T25512] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  793.546944][T25523] xt_cluster: node mask cannot exceed total number of nodes
[  793.905500][T25535] loop5: detected capacity change from 0 to 128
[  793.940438][T25535] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  793.984820][   T30] audit: type=1326 audit(793.955:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25537 comm="syz.2.8583" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x50000
[  794.010260][T25540] ceph: No source
[  794.023269][T25535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  794.085326][   T30] audit: type=1326 audit(793.985:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25537 comm="syz.2.8583" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x50000
[  794.189158][   T30] audit: type=1326 audit(793.985:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25537 comm="syz.2.8583" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x50000
[  794.307905][   T30] audit: type=1326 audit(793.985:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25537 comm="syz.2.8583" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x50000
[  794.368193][   T30] audit: type=1326 audit(793.985:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25537 comm="syz.2.8583" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x50000
[  794.397316][  T802] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  794.435456][   T30] audit: type=1326 audit(793.985:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25537 comm="syz.2.8583" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x50000
[  794.517207][   T30] audit: type=1326 audit(793.995:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25537 comm="syz.2.8583" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x50000
[  794.593652][  T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  794.616165][  T802] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  794.637382][   T30] audit: type=1326 audit(793.995:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25537 comm="syz.2.8583" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x50000
[  794.664798][  T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  794.685387][  T802] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  794.705519][   T30] audit: type=1326 audit(793.995:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25537 comm="syz.2.8583" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x50000
[  794.737136][  T802] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  794.759823][  T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.787760][  T802] usb 2-1: config 0 descriptor??
[  795.039304][  T802] hdpvr 2-1:0.0: firmware version 0x1e dated »–¸&S¶1;¨“ÃO·X^„œ	wÒΖŠg/ƒµn#»†
[  795.226654][  T802] hdpvr 2-1:0.0: device init failed
[  795.247517][  T802] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  795.294301][  T802] usb 2-1: USB disconnect, device number 34
[  795.378116][T25571] loop5: detected capacity change from 0 to 4096
[  795.475992][T25571] kAFS: unable to lookup cell '}1&fo3Š™ÄÌâ�bñ&1«˜ML³‹9ěŜâ-b.ñV1·x›˜G¼]Ì+æó‹wˆÄ‚b!±°XD,*ï‹‹%ĻĒâÝb)±´XF,+–Ë‹ÄŠb%±²XE¬*V«‹÷ˆ5Äšb-±¶XG¬+Öë‹Ä†b#ñ^±±ØDl*Þ'6-Ä–b+±µØFl+¶Û‹ÄŽb'±³ØEì*v»‹=Äžâb/±·ØGì+öû‹ććÅ�â#â q°8D*‡‹�‰#Ä‘â(q´8F|\+>!ŽÇ‹ĉâ$q²8E|Rœ*N§‹O‰3ħřâ,q¶8Gœ+>#Οç‹Ï‰Ä…â"q±¸D|^\*¾ ._—‹/‰+Ä•â*ñeññUqµøš¸F|]\+¾!®ß׋Ä·Ä�âÛâ&ñq³¸E|W|OÜ*¾/n?·‹;Ä�â.q·¸GÜ+î?÷‹ăâ!ñ°xD<*~$?�‹Ÿˆ'ÄOÅÏÄÏÅ“ââ)ñKñ´ø•xFüZ<+~#~+~'~/þ žÏ‹ÄÅ‹âOâÏâ/â%ñ²H$Fb%Nâ%A%I’%ER%MÒ%C2%K²%Gr%Oò¥˜”AºAÊ(e’2K7JY¤›¤¬R6)AÊ.å�n–rJ·H¹¤[¥ÜÒmRév)¯”OÊ/Ý!�
[  795.475992][T25571] J…¤ÂR©¨TLºS*.•�î’JJwK¥¤ÒR©¬TN*/U�*J•¤ÊR©ªTMª.Ý#Õ�jJµ¤ÚR©®TOª/5�J�¤{¥ÆR©©tŸÔLº_j.µ�ZJ­¤ÖR©­ÔNj/u�'
[  795.566819][T25581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8602'.
[  795.594577][T25583] program syz.2.8605 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  795.846512][T25587] xt_hashlimit: invalid rate
[  796.217730][T25599] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  796.342375][T25603] loop4: detected capacity change from 0 to 2048
[  796.365646][T25603] EXT4-fs: Ignoring removed oldalloc option
[  796.418488][T25603] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  796.441883][T25612] misc userio: Invalid payload size
[  796.478315][T25603] System zones: 0-7
[  796.529455][T25603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  796.574406][T25617] loop3: detected capacity change from 0 to 4096
[  796.593316][T25617] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  796.740742][T25617] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  796.801449][T25621] loop5: detected capacity change from 0 to 1024
[  796.802924][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.825501][   T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  796.893002][T25617] ntfs3(loop3): Failed to load $Extend (-2).
[  796.921779][T25617] ntfs3(loop3): Failed to initialize $Extend.
[  797.015310][   T10] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[  797.024144][T25617] ntfs3: Cannot use different iocharset when remounting!
[  797.060002][   T10] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  797.115148][   T10] usb 3-1: Product: syz
[  797.136379][   T10] usb 3-1: Manufacturer: syz
[  797.165482][   T10] usb 3-1: SerialNumber: syz
[  797.225598][   T10] usb 3-1: config 0 descriptor??
[  797.353682][T25631] loop1: detected capacity change from 0 to 256
[  797.362504][   T10] usb 3-1: selecting invalid altsetting 1
[  797.391580][   T10] comedi comedi4: could not switch to alternate setting 1
[  797.434125][   T10] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  797.462948][T25631] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  797.496068][   T10] usb 3-1: USB disconnect, device number 39
[  798.576527][T25664] loop5: detected capacity change from 0 to 2048
[  798.619725][T25664] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=301129, location=301129
[  798.681582][T25664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  798.749227][T25671] xt_l2tp: wrong L2TP version: 0
[  799.077014][T25680] openvswitch: netlink: IP tunnel dst address not specified
[  799.225608][T25685] loop3: detected capacity change from 0 to 2048
[  799.324197][T25685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  799.490070][T25685] __quota_error: 58 callbacks suppressed
[  799.490097][T25685] Quota error (device loop3): do_check_range: Getting block 196612 out of range 1-5
[  799.594808][T25685] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  799.632875][T25685] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.8653: Failed to acquire dquot type 0
[  799.679771][T17079] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  799.818330][T25668] loop4: detected capacity change from 0 to 32768
[  799.829335][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.879785][T17276] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  799.880030][T17079] usb 6-1: Using ep0 maxpacket: 16
[  799.927883][T17079] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  799.966042][T17079] usb 6-1: config 0 has no interface number 0
[  800.001250][T17079] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  800.036954][T17079] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  800.040247][T17276] usb 2-1: Using ep0 maxpacket: 32
[  800.086751][T17079] usb 6-1: config 0 interface 41 has no altsetting 0
[  800.096248][T17276] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  800.105795][T17079] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  800.125851][T17276] usb 2-1: config 0 has no interface number 0
[  800.141227][T17079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.150592][T17276] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  800.156266][T17079] usb 6-1: Product: syz
[  800.190701][T17079] usb 6-1: Manufacturer: syz
[  800.202582][T17276] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  800.221347][T17079] usb 6-1: SerialNumber: syz
[  800.243081][T17079] usb 6-1: config 0 descriptor??
[  800.249285][T17276] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  800.276615][T25691] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  800.295591][T17276] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  800.306291][T25691] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  800.356197][T17276] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  800.416049][T17276] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  800.448166][T25709] loop2: detected capacity change from 0 to 512
[  800.455726][T17276] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  800.494099][T17276] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  800.533069][T17276] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  800.591758][T17276] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  800.594682][T25691] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  800.630579][T25691] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  800.642787][T17276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.680167][T25709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  800.703024][T17276] usb 2-1: Product: syz
[  800.718129][T17276] usb 2-1: Manufacturer: syz
[  800.755324][T17276] usb 2-1: SerialNumber: syz
[  800.791733][T17276] usb 2-1: config 0 descriptor??
[  800.821185][T25697] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  800.840029][T17276] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[  800.868261][T17276] usb 2-1: couldn't find an output bulk endpoint. Bailing out.
[  800.889137][T17079] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  800.928844][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  800.963975][T17079] usb 6-1: USB disconnect, device number 34
[  801.223272][T17276] usb 2-1: USB disconnect, device number 35
[  801.459078][T25734] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  801.700429][T25744] overlay: ./file0 is not a directory
[  804.122555][T25812] loop1: detected capacity change from 0 to 16
[  804.143472][T25812] erofs (device loop1): mounted with root inode @ nid 36.
[  804.167114][T25812] erofs (device loop1): corrupted dir block 1 @ nid 36
[  806.172897][T25796] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  806.198946][T25814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8715'.
[  806.241513][T25814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8715'.
[  806.450524][T25817] loop5: detected capacity change from 0 to 2048
[  806.521089][T25817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  806.674223][T25831] loop2: detected capacity change from 0 to 64
[  806.693061][T25828] loop4: detected capacity change from 0 to 512
[  806.744167][T25831] hfs: request for non-existent node 327680 in B*Tree
[  806.785042][T25831] hfs: request for non-existent node 327680 in B*Tree
[  806.953418][   T30] audit: type=1326 audit(806.925:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.0.8728" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaead9ce59 code=0x7ffc0000
[  807.036194][   T30] audit: type=1326 audit(806.955:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.0.8728" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaead9ce59 code=0x7ffc0000
[  807.134240][   T30] audit: type=1326 audit(806.965:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.0.8728" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fbaead9ce59 code=0x7ffc0000
[  807.217614][   T30] audit: type=1326 audit(806.965:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.0.8728" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaead9ce59 code=0x7ffc0000
[  807.244515][T25851] loop4: detected capacity change from 0 to 8
[  807.308273][   T30] audit: type=1326 audit(806.965:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.0.8728" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaead9ce59 code=0x7ffc0000
[  807.334650][T25851] SQUASHFS error: Failed to read block 0x6de: -5
[  807.358085][T25851] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  807.375878][T25851] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  807.565180][T25864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8740'.
[  807.580436][   T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  807.749665][   T10] usb 2-1: Using ep0 maxpacket: 16
[  807.784510][   T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  807.816141][   T10] usb 2-1: config 0 has no interface number 0
[  807.865191][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  807.953502][   T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  807.991524][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  807.997964][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  808.022784][   T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  808.071555][T25877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8747'.
[  808.071595][T25877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8747'.
[  808.078889][   T10] usb 2-1: Product: syz
[  808.078921][   T10] usb 2-1: SerialNumber: syz
[  808.095269][   T10] usb 2-1: config 0 descriptor??
[  808.110467][   T10] cm109 2-1:0.8: invalid payload size 208, expected 4
[  808.123420][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input52
[  808.634155][    C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
[  808.641588][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  808.648760][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  808.655974][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  808.663252][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  808.670406][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  808.677553][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  808.684886][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  808.692049][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  808.699197][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  808.705575][ T5762] usb 2-1: USB disconnect, device number 36
[  808.706146][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  808.745081][T25892] Unsupported ieee802154 address type: 0
[  808.859160][T25900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8756'.
[  808.878713][ T5762] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  808.906423][T25900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8756'.
[  809.029677][  T802] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  809.209681][  T802] usb 5-1: Using ep0 maxpacket: 16
[  809.233008][  T802] usb 5-1: config index 0 descriptor too short (expected 65, got 36)
[  809.259599][  T802] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  809.301591][  T802] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  809.348338][  T802] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  809.385767][  T802] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  809.412038][  T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.453818][  T802] usb 5-1: config 0 descriptor??
[  809.459913][T25917] loop5: detected capacity change from 0 to 512
[  809.471151][T25917] EXT4-fs: Ignoring removed orlov option
[  809.569128][T25917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  809.616108][T25917] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:337: inode #15: comm syz.5.8765: verity file corrupted; can't find descriptor
[  809.651896][T25917] EXT4-fs (loop5): Remounting filesystem read-only
[  809.669465][T25923] loop1: detected capacity change from 0 to 1024
[  809.681856][T25917] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size
[  809.760158][  T802] usb 5-1: string descriptor 0 read error: -71
[  809.792906][  T802] pxrc 5-1:0.0: Could not find endpoint
[  809.813923][  T802] usb 5-1: USB disconnect, device number 36
[  809.936258][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  810.174045][T25941] QAT: Device 7 not found
[  810.847894][T25967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8790'.
[  810.949206][T25971] netlink: 'syz.0.8791': attribute type 4 has an invalid length.
[  811.018783][T25971] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8791'.
[  811.118764][T25971] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  811.177553][T25979] ieee802154 phy0 wpan0: encryption failed: -22
[  811.205338][T25980] ALSA: mixer_oss: invalid OSS volume ''
[  811.316966][T25983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8800'.
[  811.729680][T17276] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  811.818420][T26004] Unsupported ieee802154 address type: 0
[  811.825937][T25993] loop0: detected capacity change from 0 to 4096
[  811.863753][T25993] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  811.910344][T17276] usb 5-1: Using ep0 maxpacket: 16
[  811.923374][T17276] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  811.946882][T17276] usb 5-1: config 0 has no interface number 0
[  811.957358][T17276] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  812.008973][T17276] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  812.051369][T17276] usb 5-1: config 0 interface 41 has no altsetting 0
[  812.085348][T17276] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  812.121326][T17276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.156171][T17276] usb 5-1: Product: syz
[  812.163840][T17276] usb 5-1: Manufacturer: syz
[  812.178709][T17276] usb 5-1: SerialNumber: syz
[  812.202480][T26016] loop3: detected capacity change from 0 to 64
[  812.216108][T17276] usb 5-1: config 0 descriptor??
[  812.243885][T25991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  812.261767][T25991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  812.411018][T26020] loop0: detected capacity change from 0 to 256
[  812.444993][T26020] exfat: Deprecated parameter 'utf8'
[  812.482561][T26020] exfat: Deprecated parameter 'utf8'
[  812.548777][T25991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  812.564855][T26020] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dfeff5, utbl_chksum : 0xe619d30d)
[  812.593761][T25991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  812.694252][T26020] overlay: filesystem on ./file0 not supported
[  812.852002][T17276] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  812.905791][T17276] usb 5-1: USB disconnect, device number 37
[  813.383436][T26014] loop1: detected capacity change from 0 to 32768
[  813.468178][T26047] loop5: detected capacity change from 0 to 64
[  813.568120][T26047] syz.5.8829: attempt to access beyond end of device
[  813.568120][T26047] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64
[  813.619911][T26047] Buffer I/O error on dev loop5, logical block 512, async page read
[  813.647005][T26047] syz.5.8829: attempt to access beyond end of device
[  813.647005][T26047] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64
[  813.676947][T26047] Buffer I/O error on dev loop5, logical block 56576, async page read
[  813.907104][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8837'.
[  813.964203][T26061] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8837'.
[  814.012918][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8837'.
[  814.092213][T26059] loop2: detected capacity change from 0 to 4096
[  814.125360][T26059] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  814.292040][T26059] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  814.328912][T26059] ntfs3(loop2): ino=19, mi_enum_attr
[  815.101365][T26095] loop5: detected capacity change from 0 to 1024
[  815.209695][T26095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  815.303353][T26108] netlink: 'syz.1.8857': attribute type 1 has an invalid length.
[  815.320509][T26104] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set
[  815.338055][T26095] EXT4-fs error (device loop5): ext4_empty_dir:3090: inode #11: block 32: comm syz.5.8853: bad entry in directory: inode out of bounds - offset=0, inode=695563, rec_len=1024, size=1024 fake=1
[  815.338599][T17276] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  815.370097][T26108] netlink: 1008 bytes leftover after parsing attributes in process `syz.1.8857'.
[  815.399401][T26110] netlink: 'syz.3.8860': attribute type 1 has an invalid length.
[  815.417538][T26095] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #11: comm syz.5.8853: directory missing '.'
[  815.450770][T26110] netlink: 936 bytes leftover after parsing attributes in process `syz.3.8860'.
[  815.549368][T26114] loop0: detected capacity change from 0 to 2048
[  815.582578][T26114] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  815.605035][T17276] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  815.626926][T17276] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  815.675080][T26119] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  815.679342][T17276] usb 5-1: config 0 has no interface number 0
[  815.701790][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  815.744903][T26114] NILFS (loop0): the device already has a read/write mount.
[  815.746059][T17276] usb 5-1: too many endpoints for config 0 interface 64 altsetting 0: 48, using maximum allowed: 30
[  815.797392][T17276] usb 5-1: config 0 interface 64 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  815.829751][T17276] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  815.872822][T17276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.918726][T17276] usb 5-1: config 0 descriptor??
[  816.097820][T26132] netlink: 'syz.0.8869': attribute type 10 has an invalid length.
[  816.128253][T26132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8869'.
[  816.199599][ T5776] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  816.232601][T17276] usb 5-1: USB disconnect, device number 38
[  816.391331][ T5776] usb 2-1: Using ep0 maxpacket: 16
[  816.412530][ T5776] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  816.439386][ T5776] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  816.475894][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  816.486268][T26144] openvswitch: netlink: Flow actions attr not present in new flow.
[  816.488570][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  816.511247][ T5776] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  816.521886][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.539612][ T5776] usb 2-1: Product: syz
[  816.543920][ T5776] usb 2-1: Manufacturer: syz
[  816.554054][ T5776] usb 2-1: SerialNumber: syz
[  816.576707][ T5776] usb 2-1: config 0 descriptor??
[  816.689847][   T10] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  816.813508][ T5776] appledisplay 2-1:0.0: Error while getting initial brightness: -90
[  816.865702][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  816.903563][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  816.920876][ T5776] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -90
[  816.936961][   T10] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2
[  816.958302][   T10] usb 3-1: config 5 interface 0 has no altsetting 1
[  816.974814][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70
[  816.998289][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.027981][ T5776] usb 2-1: USB disconnect, device number 37
[  817.040628][   T10] usb 3-1: Product: syz
[  817.047952][   T10] usb 3-1: Manufacturer: syz
[  817.070111][   T10] usb 3-1: SerialNumber: syz
[  817.451774][T26171] loop3: detected capacity change from 0 to 2048
[  817.476229][   T10] usb 3-1: USB disconnect, device number 40
[  817.506396][T26171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  817.639015][T26171] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.8888: bg 0: block 345: padding at end of block bitmap is not set
[  817.674351][T26171] EXT4-fs (loop3): Remounting filesystem read-only
[  817.803219][ T8824] udevd[8824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  817.864355][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  818.100709][T26191] trusted_key: encrypted_key: master key parameter is missing
[  818.954370][T26222] xt_hl: Unknown TTL match mode: 255
[  818.967483][T26221] netlink: 'syz.2.8911': attribute type 1 has an invalid length.
[  819.215278][T26188] loop5: detected capacity change from 0 to 32768
[  819.776729][T26214] loop3: detected capacity change from 0 to 32768
[  819.857259][T26214] ERROR: (device loop3): dtSearch: stack overrun!
[  819.857259][T26214] 
[  819.909268][T26214] ERROR: (device loop3): remounting filesystem as read-only
[  819.949615][T26214] btstack dump:
[  819.971746][T26214] bn = 0, index = 4
[  819.989610][T26214] bn = 0, index = 4
[  820.002533][T26214] bn = 0, index = 4
[  820.036690][T26214] bn = 0, index = 4
[  820.060655][T26214] bn = 0, index = 4
[  820.088820][T26214] bn = 0, index = 4
[  820.117813][T26214] bn = 0, index = 4
[  820.139561][T26214] bn = 0, index = 0
[  820.155397][T26214] jfs_lookup: dtSearch returned -5
[  820.459695][   T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  820.642091][   T10] usb 3-1: Using ep0 maxpacket: 8
[  820.684391][   T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  820.711958][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  820.745373][   T10] usb 3-1: Product: syz
[  820.762195][   T10] usb 3-1: Manufacturer: syz
[  820.772962][   T10] usb 3-1: SerialNumber: syz
[  820.798880][   T10] usb 3-1: config 0 descriptor??
[  820.832218][   T10] gspca_main: sq905-2.14.0 probing 2770:9120
[  821.253154][   T10] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  821.286475][   T10] sq905 3-1:0.0: probe with driver sq905 failed with error -71
[  821.325106][   T10] usb 3-1: USB disconnect, device number 41
[  821.489716][T17276] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  821.506105][T26301] netlink: 'syz.0.8949': attribute type 11 has an invalid length.
[  821.541873][T26299] loop3: detected capacity change from 0 to 256
[  821.561247][T26302] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8951'.
[  821.618419][T26299] FAT-fs (loop3): Directory bread(block 64) failed
[  821.652026][T26299] FAT-fs (loop3): Directory bread(block 65) failed
[  821.653823][T17276] usb 2-1: unable to get BOS descriptor or descriptor too short
[  821.683559][T26299] FAT-fs (loop3): Directory bread(block 66) failed
[  821.702615][T17276] usb 2-1: config 114 has an invalid interface number: 240 but max is 0
[  821.712167][T26299] FAT-fs (loop3): Directory bread(block 67) failed
[  821.734598][T17276] usb 2-1: config 114 has no interface number 0
[  821.746454][T26299] FAT-fs (loop3): Directory bread(block 68) failed
[  821.756581][T17276] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[  821.773266][T26299] FAT-fs (loop3): Directory bread(block 69) failed
[  821.791912][T26299] FAT-fs (loop3): Directory bread(block 70) failed
[  821.802006][T17276] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  821.806751][T26299] FAT-fs (loop3): Directory bread(block 71) failed
[  821.840049][T26299] FAT-fs (loop3): Directory bread(block 72) failed
[  821.848361][T17276] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[  821.872340][T26299] FAT-fs (loop3): Directory bread(block 73) failed
[  821.887480][T17276] usb 2-1: config 114 interface 240 has no altsetting 0
[  821.931542][T17276] usb 2-1: string descriptor 0 read error: -22
[  821.958443][T17276] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[  822.002660][T17276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.038918][T26294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  822.050353][T26294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  822.094925][T17276] ir_usb 2-1:114.240: IR Dongle converter detected
[  822.238627][T26315] loop5: detected capacity change from 0 to 2048
[  822.286075][T17276] usb 2-1: IRDA class descriptor not found, device not bound
[  822.317589][T26315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  822.347200][T26320] loop0: detected capacity change from 0 to 128
[  822.379960][T26320] FAT-fs (loop0): bogus sectors per cluster 7
[  822.405902][T26320] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  822.442416][T26320] FAT-fs (loop0): Can't find a valid FAT filesystem
[  822.528971][T17276] usb 2-1: USB disconnect, device number 38
[  822.643110][T26329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8965'.
[  822.730172][ T5776] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  822.910629][ T5776] usb 1-1: Using ep0 maxpacket: 8
[  822.927726][ T5776] usb 1-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config
[  822.966283][ T5776] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  822.999609][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.040289][ T5776] usb 1-1: config 0 descriptor??
[  823.052041][ T5776] rndis_host 1-1:0.0: missing cdc header descriptor
[  823.077150][ T5776] cdc_acm 1-1:0.0: Control and data interfaces are not separated!
[  823.108855][ T5776] cdc_acm 1-1:0.0: This needs exactly 3 endpoints
[  823.134180][ T5776] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22
[  823.231722][T26347] Cannot find del_set index 6 as target
[  823.256570][   T10] usb 1-1: USB disconnect, device number 36
[  823.345160][T26351] loop1: detected capacity change from 0 to 256
[  823.417366][T26351] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  823.489702][ T5776] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  823.602773][T26356] loop2: detected capacity change from 0 to 2048
[  823.640487][ T5776] usb 4-1: Using ep0 maxpacket: 16
[  823.658270][T26356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  823.666616][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  823.712733][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  823.764532][ T5776] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  823.814085][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.862296][ T5776] usb 4-1: Product: syz
[  823.887438][ T5776] usb 4-1: Manufacturer: syz
[  823.910771][ T5776] usb 4-1: SerialNumber: syz
[  823.947905][ T5776] usb 4-1: config 0 descriptor??
[  823.987586][ T5776] hub 4-1:0.0: bad descriptor, ignoring hub
[  824.030789][ T5776] hub 4-1:0.0: probe with driver hub failed with error -5
[  824.086494][ T5776] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input54
[  824.128131][T26363] loop4: detected capacity change from 0 to 4096
[  824.141184][T26370] openvswitch: netlink: VXLAN extension message has 16 unknown bytes.
[  824.180270][T26363] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  824.210635][T26372] loop2: detected capacity change from 0 to 128
[  824.263842][T26372] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  824.363870][T26363] ntfs3(loop4): ino=19, mi_enum_attr
[  824.372052][T26372] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  824.403425][T26363] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  824.467413][T26363] ntfs3(loop4): ino=18, mi_enum_attr
[  825.314820][ T5776] usb 4-1: USB disconnect, device number 30
[  825.520140][T17079] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  825.552295][ T5762] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  825.699729][T17079] usb 5-1: Using ep0 maxpacket: 16
[  825.711908][T17079] usb 5-1: config index 0 descriptor too short (expected 46593, got 71)
[  825.723541][T26376] loop5: detected capacity change from 0 to 32768
[  825.740596][T17079] usb 5-1: config 0 has too many interfaces: 158, using maximum allowed: 32
[  825.750166][ T5762] usb 2-1: Using ep0 maxpacket: 32
[  825.760263][T26376] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8987 (26376)
[  825.775449][ T5762] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  825.777678][T17079] usb 5-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config
[  825.808180][ T5762] usb 2-1: config 2 has no interface number 0
[  825.820321][T26376] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  825.834755][ T5762] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  825.835212][T17079] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 158
[  825.855097][T26376] BTRFS info (device loop5): using crc32c checksum algorithm
[  825.866542][T17079] usb 5-1: config 0 has no interface number 0
[  825.876291][T17079] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01
[  825.885245][ T5762] usb 2-1: config 2 interface 88 has no altsetting 0
[  825.902484][T17079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.930525][T17079] usb 5-1: Product: syz
[  825.935255][T17079] usb 5-1: Manufacturer: syz
[  825.947311][T17079] usb 5-1: SerialNumber: syz
[  825.951615][ T5762] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  825.956104][T17079] usb 5-1: config 0 descriptor??
[  825.977167][T17079] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22
[  825.994807][T26376] BTRFS info (device loop5): enabling ssd optimizations
[  826.020481][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.049317][T26376] BTRFS info (device loop5): turning on flush-on-commit
[  826.074666][ T5762] usb 2-1: Product: syz
[  826.079678][T26376] BTRFS info (device loop5): enabling free space tree
[  826.089835][T26376] BTRFS info (device loop5): enabling auto defrag
[  826.106895][T26376] BTRFS info (device loop5): use lzo compression, level 1
[  826.106923][ T5762] usb 2-1: Manufacturer: syz
[  826.106953][ T5762] usb 2-1: SerialNumber: syz
[  826.136849][T26376] BTRFS info (device loop5): max_inline set to 4096
[  826.192096][T26398] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  826.226837][T17079] usb 5-1: USB disconnect, device number 39
[  826.284462][T26432] loop2: detected capacity change from 0 to 512
[  826.416508][T26432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  826.499259][T26398] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  826.580883][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  826.593621][ T5622] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  826.736829][ T5762] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  826.772559][ T5762] asix 2-1:2.88: probe with driver asix failed with error -71
[  826.835849][ T5762] usb 2-1: USB disconnect, device number 39
[  826.847115][T26442] x_tables: duplicate underflow at hook 3
[  827.106979][T26411] loop3: detected capacity change from 0 to 32768
[  827.147718][T26411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9005 (26411)
[  827.244749][T26411] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  827.295281][T26411] BTRFS info (device loop3): using sha256 checksum algorithm
[  827.524871][T26468] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  827.631665][T26411] BTRFS info (device loop3): enabling ssd optimizations
[  827.654422][T26411] BTRFS info (device loop3): turning on async discard
[  827.686180][T26411] BTRFS info (device loop3): enabling free space tree
[  827.738895][T26476] netlink: 'syz.5.9020': attribute type 1 has an invalid length.
[  827.972800][ T5628] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  828.050003][ T5762] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  828.219731][ T5762] usb 2-1: Using ep0 maxpacket: 16
[  828.246696][ T5762] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  828.289737][ T5762] usb 2-1: config 0 has no interface number 0
[  828.308601][   T30] audit: type=1326 audit(828.275:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26488 comm="syz.2.9028" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x7ffc0000
[  828.314528][ T5762] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  828.389651][ T5762] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  828.401043][ T5762] usb 2-1: config 0 interface 41 has no altsetting 0
[  828.407973][   T30] audit: type=1326 audit(828.275:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26488 comm="syz.2.9028" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x7ffc0000
[  828.445596][ T5762] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  828.466686][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.481002][   T30] audit: type=1326 audit(828.315:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26488 comm="syz.2.9028" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f299379ce59 code=0x7ffc0000
[  828.514707][ T5762] usb 2-1: Product: syz
[  828.530178][ T5762] usb 2-1: Manufacturer: syz
[  828.535319][ T5762] usb 2-1: SerialNumber: syz
[  828.560662][ T5762] usb 2-1: config 0 descriptor??
[  828.565698][   T30] audit: type=1326 audit(828.315:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26488 comm="syz.2.9028" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299379ce59 code=0x7ffc0000
[  828.631116][T26480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  828.655360][T26480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  828.952748][T26480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  828.992589][T26480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  829.223772][ T5762] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  829.249495][ T5762] usb 2-1: USB disconnect, device number 40
[  829.267610][T26481] loop4: detected capacity change from 0 to 32768
[  829.275937][T26481] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9023 (26481)
[  829.301761][T26481] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  829.301815][T26481] BTRFS info (device loop4): using sha256 checksum algorithm
[  829.439481][T26481] BTRFS info (device loop4): enabling ssd optimizations
[  829.440635][T26481] BTRFS info (device loop4): turning on async discard
[  829.440670][T26481] BTRFS info (device loop4): enabling free space tree
[  829.583939][ T5634] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  829.725819][T26528] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[  829.772245][T26487] loop5: detected capacity change from 0 to 32768
[  829.898453][T26487] jfs_rename did not expect dtDelete to return rc = -2
[  829.898491][T26487] ERROR: (device loop5): txAbort: 
[  829.898491][T26487] 
[  829.920280][T26487] ERROR: (device loop5): remounting filesystem as read-only
[  830.381248][T26539] netlink: 'syz.4.9045': attribute type 41 has an invalid length.
[  830.748264][T26548] loop4: detected capacity change from 0 to 512
[  830.783970][T26548] EXT4-fs: inline encryption not supported
[  830.820478][T26548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  830.906177][T26548] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.9048: inode has both inline data and extents flags
[  830.955167][T26557] loop1: detected capacity change from 0 to 256
[  830.956536][T26548] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  830.969541][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  830.985181][    C0] EXT4-fs (loop4): initial error at time 830: ext4_orphan_get:1397: inode 15
[  830.994058][    C0] EXT4-fs (loop4): last error at time 830: ext4_orphan_get:1397: inode 15
[  831.034643][T26548] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.9048: couldn't read orphan inode 15 (err -117)
[  831.034699][T26548] loop4: lost filesystem error report for type 5 error -117
[  831.053307][T26548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  831.063232][T26557] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  831.107411][T26557] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[  831.273738][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.410396][T26565] loop1: detected capacity change from 0 to 1024
[  831.450255][ T5762] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  831.475328][T26565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  831.600616][ T5762] usb 1-1: Using ep0 maxpacket: 16
[  831.611567][ T5762] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  831.620446][ T5762] usb 1-1: config 0 has no interface number 0
[  831.634879][ T5762] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  831.647704][ T5762] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  831.660221][ T5762] usb 1-1: config 0 interface 41 has no altsetting 0
[  831.670081][ T5762] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  831.682739][ T5638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.689346][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.709958][ T5762] usb 1-1: Product: syz
[  831.715689][ T5762] usb 1-1: Manufacturer: syz
[  831.728951][ T5762] usb 1-1: SerialNumber: syz
[  831.746981][ T5762] usb 1-1: config 0 descriptor??
[  831.758636][T26562] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  831.777983][T26562] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  832.028366][T26562] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  832.060057][T26562] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  832.294113][ T5762] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  832.346658][ T5762] usb 1-1: USB disconnect, device number 37
[  832.992650][T26599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9072'.
[  833.174442][T26603] loop1: detected capacity change from 0 to 64
[  833.217700][T26603] Bad inode number on dev loop1: 150994946 is out of range
[  833.385017][T26591] loop3: detected capacity change from 0 to 32768
[  833.448231][T26591] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  833.554176][T26591] XFS (loop3): Ending clean mount
[  833.586930][T26622] netlink: 'syz.0.9079': attribute type 21 has an invalid length.
[  833.595617][T26622] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9079'.
[  833.716358][ T5628] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  834.263408][T26632] loop3: detected capacity change from 0 to 256
[  836.169712][T26622] netlink: 'syz.0.9079': attribute type 4 has an invalid length.
[  836.189872][T26622] netlink: 'syz.0.9079': attribute type 5 has an invalid length.
[  836.202860][T26622] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9079'.
[  836.237548][T26645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9090'.
[  836.257172][T26645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9090'.
[  836.542326][T26654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9095'.
[  836.579821][T26657] loop3: detected capacity change from 0 to 512
[  836.654881][T26657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  836.886848][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  837.024499][T26673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9101'.
[  837.069279][T26673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9101'.
[  837.647567][T26697] loop4: detected capacity change from 0 to 64
[  837.974514][T26707] loop3: detected capacity change from 0 to 128
[  838.010471][T26707] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  838.095825][ T5628] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  838.280021][T26719] netlink: 'syz.3.9122': attribute type 28 has an invalid length.
[  838.302387][T26719] netlink: 'syz.3.9122': attribute type 3 has an invalid length.
[  838.326309][T26719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9122'.
[  838.541593][T26725] loop3: detected capacity change from 0 to 1024
[  838.570124][T26725] EXT4-fs: inline encryption not supported
[  838.595041][T26725] EXT4-fs (loop3): orphan cleanup on readonly fs
[  838.657007][T26725] EXT4-fs (loop3): 1 truncate cleaned up
[  838.694736][T26725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  838.858333][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  838.881264][T26734] netlink: 'syz.2.9131': attribute type 6 has an invalid length.
[  838.972363][T26736] loop4: detected capacity change from 0 to 16
[  838.981649][T26736] erofs (device loop4): mounted with root inode @ nid 36.
[  841.643563][T26758] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved
[  841.910927][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  842.256618][T26778] lo speed is unknown, defaulting to 1000
[  842.261964][T26781] loop4: detected capacity change from 0 to 8
[  842.310116][T26778] lo speed is unknown, defaulting to 1000
[  842.340734][T26778] lo speed is unknown, defaulting to 1000
[  842.422715][T26784] loop1: detected capacity change from 0 to 512
[  842.438416][T26787] loop5: detected capacity change from 0 to 64
[  842.508653][T26784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  842.593037][T26784] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.9155: corrupted xattr block 33: invalid checksum
[  842.669444][ T5638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  843.169900][T26810] netlink: 'syz.1.9166': attribute type 2 has an invalid length.
[  843.192526][T26810] netlink: 'syz.1.9166': attribute type 2 has an invalid length.
[  843.670804][T26823] loop1: detected capacity change from 0 to 64
[  843.770601][T26778] infiniband s
z1: set active
[  843.789250][T26778] infiniband s
z1: added lo
[  843.828925][T26778] smbdirect: ib_dev[s
z1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  843.847924][T26778] smbdirect: ib_dev[s
z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  843.865411][T26778] smbdirect: ib_dev[s
z1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  843.933103][T26778] RDS/IB: s
z1: added
[  843.937760][T26778] smc: adding ib device s
z1 with port count 1
[  843.944155][T26778] smc:    ib device s
z1 port 1 has no pnetid
[  846.229798][T17079] lo speed is unknown, defaulting to 1000
[  846.268372][ T5776] lo speed is unknown, defaulting to 1000
[  846.308356][T26778] lo speed is unknown, defaulting to 1000
[  846.460002][T26834] loop1: detected capacity change from 0 to 64
[  846.507972][T26834] syz.1.9180: attempt to access beyond end of device
[  846.507972][T26834] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  846.861584][T26850] program syz.5.9186 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  847.034616][  T114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  847.103285][T26859] binder: 26857:26859 ioctl c018620c 200000000100 returned -22
[  847.140536][T26861] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  847.178280][T26861] overlayfs: missing 'lowerdir'
[  847.216788][T26864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9204'.
[  847.263395][T26864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9204'.
[  847.551406][T26778] lo speed is unknown, defaulting to 1000
[  847.745258][T26778] lo speed is unknown, defaulting to 1000
[  847.933667][T26778] lo speed is unknown, defaulting to 1000
[  848.123647][T26778] lo speed is unknown, defaulting to 1000
[  848.312653][T26778] lo speed is unknown, defaulting to 1000
[  848.884907][T26883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  850.252544][T26910] loop3: detected capacity change from 0 to 32768
[  852.624644][T26892] 8021q: adding VLAN 0 to HW filter on device .`
[  852.636826][T26892] 8021q: adding VLAN 0 to HW filter on device team0
[  852.656424][T26892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  852.708557][T26892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  852.746108][T26892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  852.765784][T26892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  852.781862][T26892] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  852.800385][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  852.825279][T26916] netlink: 'syz.5.9218': attribute type 2 has an invalid length.
[  853.347542][T26946] loop5: detected capacity change from 0 to 136
[  853.419811][T26945] loop4: detected capacity change from 0 to 1024
[  853.508400][T26945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  853.708234][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.670904][T26965] dummy0: entered promiscuous mode
[  856.690128][T26965] dummy0: entered allmulticast mode
[  856.972842][T26983] program syz.4.9250 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  857.087211][T26985] netlink: 'syz.5.9251': attribute type 5 has an invalid length.
[  857.646766][   T30] audit: type=1326 audit(857.615:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.5.9262" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7acd9ce59 code=0x7ffc0000
[  857.735827][   T30] audit: type=1326 audit(857.615:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.5.9262" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7acd9ce59 code=0x7ffc0000
[  857.820281][   T30] audit: type=1326 audit(857.665:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.5.9262" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7acd9ce59 code=0x7ffc0000
[  857.900214][   T30] audit: type=1326 audit(857.665:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.5.9262" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7acd9ce59 code=0x7ffc0000
[  858.016504][   T30] audit: type=1326 audit(857.675:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.5.9262" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb7acd9ce59 code=0x7ffc0000
[  858.123608][   T30] audit: type=1326 audit(857.675:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.5.9262" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7acd9ce59 code=0x7ffc0000
[  858.203517][   T30] audit: type=1326 audit(857.675:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.5.9262" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7acd9ce59 code=0x7ffc0000
[  858.296000][   T30] audit: type=1326 audit(857.675:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.5.9262" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb7acd9ce59 code=0x7ffc0000
[  858.364965][   T30] audit: type=1326 audit(857.675:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.5.9262" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb7acd9ce59 code=0x7ffc0000
[  858.550195][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  858.595282][T26995] loop4: detected capacity change from 0 to 32768
[  858.605731][T27030] overlayfs: cannot append lower layer
[  858.623494][T26995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9256 (26995)
[  858.674709][T26995] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  858.674773][T26995] BTRFS info (device loop4): using sha256 checksum algorithm
[  858.809293][T26995] BTRFS info (device loop4): enabling ssd optimizations
[  858.809334][T26995] BTRFS info (device loop4): turning on async discard
[  858.809366][T26995] BTRFS info (device loop4): enabling free space tree
[  859.045842][ T5634] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  859.536898][T27027] loop5: detected capacity change from 0 to 32768
[  859.606183][T27055] netlink: 'syz.4.9275': attribute type 7 has an invalid length.
[  860.224416][T27057] loop5: detected capacity change from 0 to 4096
[  860.284028][T27057] ntfs3(loop5): ino=19, mi_enum_attr
[  860.291358][T27057] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  860.636291][T27061] loop5: detected capacity change from 0 to 256
[  860.663327][T27061] FAT-fs (loop5): Directory bread(block 64) failed
[  860.671821][T27061] FAT-fs (loop5): Directory bread(block 65) failed
[  860.678456][T27061] FAT-fs (loop5): Directory bread(block 66) failed
[  860.686688][T27061] FAT-fs (loop5): Directory bread(block 67) failed
[  860.695137][T27061] FAT-fs (loop5): Directory bread(block 68) failed
[  860.704128][T27061] FAT-fs (loop5): Directory bread(block 69) failed
[  860.713328][T27061] FAT-fs (loop5): Directory bread(block 70) failed
[  860.720438][T27061] FAT-fs (loop5): Directory bread(block 71) failed
[  860.727114][T27061] FAT-fs (loop5): Directory bread(block 72) failed
[  860.734239][T27061] FAT-fs (loop5): Directory bread(block 73) failed
[  862.390550][T27017] vlan0: entered promiscuous mode
[  862.701805][T27076] usb usb9: check_ctrlrecip: process 27076 (syz.4.9286) requesting ep 01 but needs 81
[  862.773935][T27076] usb usb9: usbfs: process 27076 (syz.4.9286) did not claim interface 0 before use
[  862.986143][T27084] loop0: detected capacity change from 0 to 1024
[  863.001762][T27087] loop5: detected capacity change from 0 to 8
[  863.117217][T27087] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  863.274526][   T30] audit: type=1326 audit(863.235:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.1.9296" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df739ce59 code=0x7ffc0000
[  863.378829][   T30] audit: type=1326 audit(863.235:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.1.9296" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df739ce59 code=0x7ffc0000
[  863.488700][   T30] audit: type=1326 audit(863.285:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.1.9296" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df739ce59 code=0x7ffc0000
[  863.557547][T27102] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9299'.
[  863.584901][   T30] audit: type=1326 audit(863.285:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.1.9296" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df739ce59 code=0x7ffc0000
[  863.632733][T27102] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9299'.
[  863.668735][   T30] audit: type=1326 audit(863.285:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.1.9296" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f7df739ce59 code=0x7ffc0000
[  863.719746][T17079] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  863.766500][   T30] audit: type=1326 audit(863.285:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.1.9296" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df739ce59 code=0x7ffc0000
[  863.871641][   T30] audit: type=1326 audit(863.285:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.1.9296" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df739ce59 code=0x7ffc0000
[  863.898183][T27105] loop1: detected capacity change from 0 to 4096
[  863.912854][T17079] usb 5-1: unable to get BOS descriptor or descriptor too short
[  863.922875][   T30] audit: type=1326 audit(863.305:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.1.9296" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7df739ce59 code=0x7ffc0000
[  863.960834][T17079] usb 5-1: not running at top speed; connect to a high speed hub
[  863.987481][T17079] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  864.019277][   T30] audit: type=1326 audit(863.305:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.1.9296" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7df739ce59 code=0x7ffc0000
[  864.022157][T27105] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  864.060148][T17079] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  864.092210][T17079] usb 5-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30
[  864.123811][T27105] ntfs3(loop1): Failed to load $Extend (-22).
[  864.133398][T17079] usb 5-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170
[  864.162425][T27105] ntfs3(loop1): Failed to initialize $Extend.
[  864.176289][T17079] usb 5-1: config 1 interface 1 has no altsetting 0
[  864.210908][T17079] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  864.250166][T17079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  864.286109][T17079] usb 5-1: Product: syz
[  864.305070][T17079] usb 5-1: Manufacturer: syz
[  864.326141][T11185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  864.349768][T17079] usb 5-1: SerialNumber: syz
[  864.376897][T27097] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  864.644591][T17079] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22
[  864.753901][T17079] usb 5-1: USB disconnect, device number 40
[  865.174033][T27139] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  865.509959][ T5776] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  865.679728][ T5776] usb 4-1: Using ep0 maxpacket: 16
[  865.698179][ T5776] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  865.723843][ T5776] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config
[  865.751210][ T5776] usb 4-1: config 0 has no interface number 0
[  865.773615][ T5776] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  865.798672][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.817218][ T5776] usb 4-1: Product: syz
[  865.839623][ T5776] usb 4-1: Manufacturer: syz
[  865.856881][ T5776] usb 4-1: SerialNumber: syz
[  865.892303][ T5776] usb 4-1: config 0 descriptor??
[  865.929922][ T5776] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  865.966726][ T5776] uvcvideo 4-1:0.105: No valid video chain found.
[  866.045777][T27138] loop0: detected capacity change from 0 to 32768
[  866.094975][T27138] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9317 (27138)
[  866.131109][ T5776] usb 4-1: USB disconnect, device number 31
[  866.168200][T27138] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  866.210631][T27138] BTRFS info (device loop0): using sha256 checksum algorithm
[  866.291310][T27170] netlink: 'syz.1.9332': attribute type 3 has an invalid length.
[  866.299719][T27170] netlink: 'syz.1.9332': attribute type 3 has an invalid length.
[  866.308041][T27170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9332'.
[  866.370434][T27138] BTRFS info (device loop0): enabling ssd optimizations
[  866.412014][T27138] BTRFS info (device loop0): turning on async discard
[  866.441018][T27138] BTRFS info (device loop0): enabling free space tree
[  866.514232][T27184] netlink: 'syz.4.9334': attribute type 10 has an invalid length.
[  866.543002][T27184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9334'.
[  866.636672][ T5621] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  867.574172][T27205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9344'.
[  869.396234][T27184] dummy0: entered promiscuous mode
[  869.409864][T27184] dummy0: entered allmulticast mode
[  869.417270][T27184] bridge0: port 3(dummy0) entered blocking state
[  869.440557][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  869.449430][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  869.449893][T27184] bridge0: port 3(dummy0) entered disabled state
[  869.541563][T27207] loop5: detected capacity change from 0 to 512
[  869.611341][T27207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  869.896633][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  869.908505][T27222] loop2: detected capacity change from 0 to 128
[  870.072402][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  870.160954][T27232] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  870.209156][T27226] loop0: detected capacity change from 0 to 4096
[  870.248249][T27226] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  870.282683][T27226] ntfs3(loop0): ino=3, mi_enum_attr
[  870.346127][T27226] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  870.637708][   T59] ntfs3(loop0): ino=1f, failed to open parent directory r=5 to update
[  870.767887][T27246] netlink: 'syz.1.9363': attribute type 6 has an invalid length.
[  870.792837][T27246] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9363'.
[  870.859668][ T5776] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  871.038761][ T5776] usb 3-1: unable to get BOS descriptor or descriptor too short
[  871.076958][ T5776] usb 3-1: not running at top speed; connect to a high speed hub
[  871.107449][T27256] netlink: 'syz.3.9368': attribute type 10 has an invalid length.
[  871.116689][ T5776] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40
[  871.118995][T27224] loop4: detected capacity change from 0 to 32768
[  871.142785][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.167139][ T5776] usb 3-1: Product: syz
[  871.167980][T27256] macvlan1: entered promiscuous mode
[  871.179671][ T5776] usb 3-1: Manufacturer: syz
[  871.193327][ T5776] usb 3-1: SerialNumber: syz
[  871.220229][T27256] macvlan1: entered allmulticast mode
[  871.222473][T27254] loop1: detected capacity change from 0 to 4096
[  871.265184][T27256] veth1_vlan: entered allmulticast mode
[  871.304704][T27256] .`: (slave macvlan1): Enslaving as an active interface with an up link
[  871.316790][T27259] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  871.446854][ T5776] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  871.485257][ T5776] usb 3-1: found format II with max.bitrate = 9, frame size=0
[  871.528125][ T5776] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  871.761807][ T5776] usb 3-1: USB disconnect, device number 42
[  871.888629][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  872.742299][T27263] loop4: detected capacity change from 0 to 32768
[  872.778534][T27263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9371 (27263)
[  872.808437][T27296] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9385'.
[  872.834019][T27263] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  872.850569][ T5757] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  872.869077][T27263] BTRFS info (device loop4): using sha256 checksum algorithm
[  872.906351][T27296] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9385'.
[  873.009795][ T5757] usb 2-1: Using ep0 maxpacket: 16
[  873.024363][ T5757] usb 2-1: unable to get BOS descriptor or descriptor too short
[  873.035576][ T5757] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  873.051898][T27263] BTRFS info (device loop4): enabling ssd optimizations
[  873.064174][ T5757] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  873.083661][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.099607][ T5757] usb 2-1: Product: syz
[  873.106349][T27263] BTRFS info (device loop4): turning on async discard
[  873.106450][ T5757] usb 2-1: Manufacturer: syz
[  873.119001][ T5757] usb 2-1: SerialNumber: syz
[  873.127647][T27263] BTRFS info (device loop4): enabling free space tree
[  873.261056][ T5634] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  873.412643][ T5757] snd-ua101 2-1:1.1: sample format descriptor not found
[  873.440820][ T5757] snd-ua101 2-1:1.0: invalid bNumEndpoints
[  873.564849][ T5757] usb 2-1: USB disconnect, device number 41
[  874.041188][T27342] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9400'.
[  874.347433][T27345] loop0: detected capacity change from 0 to 4096
[  874.376729][T27351] loop5: detected capacity change from 0 to 1024
[  874.442020][T27357] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  874.516592][T27351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  874.644780][T27351] EXT4-fs warning (device loop5): ext4_rmdir:3189: inode #11: comm syz.5.9405: empty directory 'file1' has too many links (111)
[  874.934269][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  875.295994][T27387] loop1: detected capacity change from 0 to 16
[  875.373834][T27387] erofs (device loop1): mounted with root inode @ nid 36.
[  875.429408][T27390] loop3: detected capacity change from 0 to 512
[  875.461738][T27390] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  875.531929][T27393] bond0: option mode: unable to set because the bond device is up
[  875.565622][T27390] EXT4-fs (loop3): 1 truncate cleaned up
[  875.631738][T27390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  875.748174][T27390] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  875.995084][T27414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9434'.
[  876.011686][T27413] loop5: detected capacity change from 0 to 256
[  876.026110][T27414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9434'.
[  876.053971][T27413] exfat: Deprecated parameter 'namecase'
[  876.062371][T27414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9434'.
[  876.078755][T27413] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  876.151412][T27413] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  876.814465][T27438] loop4: detected capacity change from 0 to 1764
[  877.189097][T27453] loop5: detected capacity change from 0 to 256
[  877.602671][T27473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9462'.
[  878.080916][  T802] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  878.191363][T27495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9474'.
[  878.218852][T27497] dvmrp1: left allmulticast mode
[  878.259595][  T802] usb 6-1: Using ep0 maxpacket: 16
[  878.286660][  T802] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  878.321482][  T802] usb 6-1: config 0 has no interface number 0
[  878.348437][  T802] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  878.384827][  T802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.409196][  T802] usb 6-1: Product: syz
[  878.423865][  T802] usb 6-1: Manufacturer: syz
[  878.436305][  T802] usb 6-1: SerialNumber: syz
[  878.461597][  T802] usb 6-1: config 0 descriptor??
[  878.496006][  T802] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  878.638027][T27509] xt_hashlimit: overflow, rate too high: 0
[  878.731137][T27513] loop4: detected capacity change from 0 to 512
[  878.797714][T27513] EXT4-fs (loop4): orphan cleanup on readonly fs
[  878.826740][T27513] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  878.860114][T27513] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  878.879533][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  878.886024][    C1] EXT4-fs (loop4): initial error at time 878: ext4_mb_generate_buddy:1314
[  878.894580][    C1] EXT4-fs (loop4): last error at time 878: ext4_mb_generate_buddy:1314
[  878.911189][  T802] gspca_spca1528: reg_w err -71
[  878.939929][  T802] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  878.957542][T27513] EXT4-fs error (device loop4): ext4_clear_blocks:874: inode #13: comm syz.4.9482: attempt to clear invalid blocks 2 len 1
[  878.962363][  T802] usb 6-1: USB disconnect, device number 35
[  878.999675][T27513] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  879.000309][T27513] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.9482: invalid indirect mapped block 1819239214 (level 0)
[  879.053313][T27513] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  879.053804][T27513] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.9482: invalid indirect mapped block 1819239214 (level 1)
[  879.084629][T27513] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  879.085457][T27513] EXT4-fs (loop4): 1 truncate cleaned up
[  879.131605][T27513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  879.172311][T27513] EXT4-fs error (device loop4): ext4_lookup:1781: inode #2: comm syz.4.9482: 'file1' linked to parent dir
[  879.346157][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  879.592449][T27529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9491'.
[  879.993161][T27537] bond1: option lp_interval: invalid value (0)
[  880.007234][T27537] bond1: option lp_interval: allowed values 1 - 2147483647
[  880.063525][T27537] bond1 (unregistering): Released all slaves
[  880.194749][T27557] loop0: detected capacity change from 0 to 8
[  880.289983][T17276] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  880.492615][T17276] usb 2-1: Using ep0 maxpacket: 16
[  880.517115][T17276] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  880.555277][T17276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.592929][T17276] usb 2-1: Product: syz
[  880.609716][T17276] usb 2-1: Manufacturer: syz
[  880.630679][T17276] usb 2-1: SerialNumber: syz
[  880.667781][T17276] r8152-cfgselector 2-1: Unknown version 0x0000
[  880.694908][T17276] r8152-cfgselector 2-1: config 0 descriptor??
[  880.747390][T27573] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  880.960623][T17276] r8152-cfgselector 2-1: Unknown version 0x0000
[  880.985408][T17276] r8152-cfgselector 2-1: No union descriptors
[  881.083170][T27587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9517'.
[  881.107973][T27587] openvswitch: netlink: Message has 16 unknown bytes.
[  881.179901][ T5757] r8152-cfgselector 2-1: USB disconnect, device number 42
[  881.626658][T27605] netlink: 'syz.5.9528': attribute type 1 has an invalid length.
[  881.639717][  T802] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  881.793766][  T802] usb 4-1: Using ep0 maxpacket: 16
[  881.798642][  T802] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  881.798689][  T802] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  881.798728][  T802] usb 4-1: Product: syz
[  881.798756][  T802] usb 4-1: Manufacturer: syz
[  881.798786][  T802] usb 4-1: SerialNumber: syz
[  881.826578][  T802] usb 4-1: config 0 descriptor??
[  882.049747][  T802] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  882.081980][T27619] loop5: detected capacity change from 0 to 24
[  882.091870][T27619] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  882.181567][T27619] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  882.251054][  T802] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  882.251105][  T802] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71)
[  882.330407][T27625] xt_TCPMSS: Only works on TCP SYN packets
[  882.380022][  T802] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  882.416377][  T802] usb 4-1: USB disconnect, device number 32
[  882.614700][T27633] loop2: detected capacity change from 0 to 256
[  883.369708][   T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  883.429434][T27660] IPVS: length: 72 != 24
[  883.469611][ T5757] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  883.561961][   T10] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  883.594670][   T10] usb 4-1: config 0 has no interface number 1
[  883.610573][T27665] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9557'.
[  883.617671][   T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[  883.656772][   T10] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  883.670231][T27669] netlink: 276 bytes leftover after parsing attributes in process `syz.0.9559'.
[  883.679778][ T5757] usb 3-1: Using ep0 maxpacket: 8
[  883.705583][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  883.707704][ T5757] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  883.713699][   T10] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  883.738575][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.753750][   T10] usb 4-1: config 0 descriptor??
[  883.777892][ T5757] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  883.809792][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  883.840838][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  883.877556][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  883.899927][ T5776] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  883.918923][ T5757] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  883.948100][T27674] loop0: detected capacity change from 0 to 512
[  883.955230][ T5757] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  883.983255][   T10] usb 4-1: Could not set interface, error -71
[  883.989440][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.998811][T27674] EXT4-fs: inline encryption not supported
[  884.014066][ T5757] usb 3-1: Product: syz
[  884.024715][   T10] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22
[  884.031871][ T5757] usb 3-1: Manufacturer: syz
[  884.045298][T27674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  884.059307][ T5757] usb 3-1: SerialNumber: syz
[  884.063055][   T10] usb 4-1: USB disconnect, device number 33
[  884.076312][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64
[  884.100039][T27674] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  884.101085][ T5757] usb 3-1: config 0 descriptor??
[  884.124000][ T5776] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  884.146496][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.153976][T27653] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  884.174621][ T5776] usb 2-1: Product: syz
[  884.179033][ T5776] usb 2-1: Manufacturer: syz
[  884.181059][T27674] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 1
[  884.184316][ T5776] usb 2-1: SerialNumber: syz
[  884.194122][T27674] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  884.207988][T27674] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.9562: Failed to acquire dquot type 1
[  884.222957][T27674] loop0: lost filesystem error report for type 5 error -5
[  884.226488][T27674] EXT4-fs (loop0): Remounting filesystem read-only
[  884.233758][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  884.233790][    C0] EXT4-fs (loop0): initial error at time 884: ext4_acquire_dquot:7032
[  884.233831][    C0] EXT4-fs (loop0): last error at time 884: ext4_acquire_dquot:7032
[  884.329264][ T5776] usb 2-1: config 0 descriptor??
[  884.342730][T27674] EXT4-fs (loop0): 1 truncate cleaned up
[  884.351831][T27668] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  884.369266][T27674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  884.398326][ T5776] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input57
[  884.504238][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  884.543245][   T29] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  884.618625][T17276] usb 2-1: USB disconnect, device number 43
[  884.620338][T27688] loop4: detected capacity change from 0 to 512
[  884.664387][T27688] EXT4-fs: Ignoring removed oldalloc option
[  884.696039][T27688] EXT4-fs (loop4): filesystem is read-only
[  884.714125][T27688] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  884.731854][   T29] usb 6-1: Using ep0 maxpacket: 32
[  884.741677][   T29] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  884.751651][T27688] EXT4-fs (loop4): filesystem is read-only
[  884.758764][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.769294][T27688] EXT4-fs (loop4): orphan cleanup on readonly fs
[  884.786926][   T29] usb 6-1: config 0 descriptor??
[  884.800453][T27688] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.9567: bg 0: block 64: padding at end of block bitmap is not set
[  884.831502][T27695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9570'.
[  884.869275][   T29] gspca_main: sq930x-2.14.0 probing 041e:403c
[  884.916922][T27688] loop4: lost filesystem error report for type 5 error -117
[  884.920330][    C1] EXT4-fs (loop4): initial error at time 884: ext4_validate_block_bitmap:440
[  884.936522][    C1] EXT4-fs (loop4): last error at time 884: ext4_validate_block_bitmap:440
[  884.965733][T27688] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  884.997230][T27697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9571'.
[  885.006576][T27688] loop4: lost filesystem error report for type 5 error -117
[  885.008695][T27688] EXT4-fs (loop4): 1 orphan inode deleted
[  885.041636][T27697] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  885.072035][T27688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  885.095093][T27699] loop3: detected capacity change from 0 to 1024
[  885.120027][T27699] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  885.271477][   T29] gspca_sq930x: ucbus_write failed -71
[  885.309119][   T29] sq930x 6-1:0.0: probe with driver sq930x failed with error -71
[  885.337831][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  885.357236][   T29] usb 6-1: USB disconnect, device number 36
[  885.691093][ T5776] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  885.760064][ T5757] rc_core: IR keymap rc-snapstream-firefly not found
[  885.795712][ T5757] Registered IR keymap rc-empty
[  885.819306][ T5757] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  885.870563][ T5757] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input56
[  885.882063][ T5776] usb 2-1: Using ep0 maxpacket: 16
[  885.917220][ T5776] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  885.965760][ T5776] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  885.971228][ T5757] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input58
[  886.023856][ T5776] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  886.057895][T27722] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  886.094759][ T5776] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  886.133696][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.135063][ T5757] usb 3-1: USB disconnect, device number 43
[  886.141835][    C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  886.199974][ T5776] usb 2-1: Product: syz
[  886.221759][ T5776] usb 2-1: Manufacturer: syz
[  886.242490][ T5776] usb 2-1: SerialNumber: syz
[  886.343950][ T5776] usb 2-1: 0:2 : does not exist
[  886.551552][T27729] loop4: detected capacity change from 0 to 4096
[  886.575231][T27732] loop0: detected capacity change from 0 to 2048
[  886.641544][T27737] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  886.666565][T27738] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  886.763668][ T5776] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1)
[  886.837120][T27738] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  886.887102][T27738] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  886.960289][T27738] Remounting filesystem read-only
[  886.968858][ T5776] usb 2-1: USB disconnect, device number 44
[  887.005668][ T5621] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  887.201109][ T8824] udevd[8824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  887.324125][T27754] netlink: 'syz.2.9597': attribute type 4 has an invalid length.
[  887.351028][T27754] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9597'.
[  887.499613][   T29] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  887.679786][   T29] usb 1-1: Using ep0 maxpacket: 32
[  887.718246][   T29] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  887.766948][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.787527][T27768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9604'.
[  887.811695][   T29] usb 1-1: Product: syz
[  887.825235][   T29] usb 1-1: Manufacturer: syz
[  887.842990][   T29] usb 1-1: SerialNumber: syz
[  887.898299][   T29] usb 1-1: config 0 descriptor??
[  887.929361][   T29] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  888.351181][   T29] gspca_topro: reg_w err -71
[  888.409590][   T29] gspca_topro: Sensor soi763a
[  888.450534][   T29] usb 1-1: USB disconnect, device number 38
[  888.701061][T27801] loop2: detected capacity change from 0 to 64
[  888.826022][T27808] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  889.105202][T27813] loop5: detected capacity change from 0 to 256
[  889.271146][T11189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  889.538792][T27824] loop2: detected capacity change from 0 to 2048
[  889.551789][T27828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9633'.
[  889.595385][T27831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9634'.
[  889.608634][T27824] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  889.642571][T27831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9634'.
[  889.683548][   T30] audit: type=1800 audit(889.645:292): pid=27824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9631" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  889.909861][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  890.040504][T27845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  890.126251][T27850] loop5: detected capacity change from 0 to 8
[  890.136429][T27849] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9644'.
[  890.160600][T27850] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  890.186414][T27850] cramfs: empty filesystem
[  890.287143][T27856] xfrm0: entered promiscuous mode
[  890.299663][T27856] xfrm0: entered allmulticast mode
[  890.407562][ T8824] udevd[8824]: incorrect cramfs checksum on /dev/loop5
[  890.892566][T27880] netlink: 'syz.3.9658': attribute type 2 has an invalid length.
[  891.552083][T27904] xt_time: invalid argument - start or stop time greater than 23:59:59
[  891.587939][T27908] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  891.739676][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  891.911797][   T10] usb 4-1: Using ep0 maxpacket: 16
[  891.939814][   T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  891.957943][   T10] usb 4-1: config 0 has no interface number 0
[  891.978759][   T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  891.994542][   T10] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  892.014277][T27920] xt_hashlimit: size too large, truncated to 1048576
[  892.021307][   T10] usb 4-1: Product: syz
[  892.025586][   T10] usb 4-1: SerialNumber: syz
[  892.030485][T27920] xt_hashlimit: max too large, truncated to 1048576
[  892.044872][   T10] usb 4-1: config 0 descriptor??
[  892.065344][   T10] cm109 4-1:0.8: invalid payload size 32, expected 4
[  892.089408][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input59
[  892.304253][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  892.304943][   T29] usb 4-1: USB disconnect, device number 34
[  892.311244][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  892.426517][   T29] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  892.666244][T27901] loop5: detected capacity change from 0 to 32768
[  892.745990][T27901] jfs_strtoUCS: char2uni returned -22.
[  892.763815][T27901] charset = cp1250, char = 0x81
[  892.876686][T27934] IPv6: NLM_F_CREATE should be specified when creating new route
[  892.934238][T27914] loop2: detected capacity change from 0 to 32768
[  892.939350][T27934] netlink: 'syz.1.9685': attribute type 1 has an invalid length.
[  892.969993][T27914] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9675 (27914)
[  893.108389][T27914] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  893.173386][T27914] BTRFS info (device loop2): using sha256 checksum algorithm
[  893.343370][T27914] BTRFS info (device loop2): turning off barriers
[  893.413598][T27914] BTRFS info (device loop2): enabling free space tree
[  893.527462][T27922] loop0: detected capacity change from 0 to 32768
[  893.563410][T27922] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9679 (27922)
[  893.624146][T27922] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  893.671476][T27922] BTRFS info (device loop0): using blake2b checksum algorithm
[  893.690026][ T5640] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  893.850646][   T29] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  893.897068][T27922] BTRFS info (device loop0 state EC): setting nodatasum
[  893.950033][T27922] BTRFS info (device loop0 state EC): setting nodatacow
[  893.977823][T27922] BTRFS info (device loop0 state EC): disabling log replay at mount time
[  894.013733][   T29] usb 6-1: Using ep0 maxpacket: 8
[  894.014440][T27922] BTRFS info (device loop0 state EC): enabling free space tree
[  894.052257][   T29] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  894.096981][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.100754][T27922] BTRFS info (device loop0 state EC): ignoring data csums
[  894.177331][   T29] pvrusb2: Hardware description: Terratec Grabster AV400
[  894.227849][   T29] pvrusb2: **********
[  894.243160][   T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  894.296585][   T29] pvrusb2: Important functionality might not be entirely working.
[  894.344236][   T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  894.392633][   T29] pvrusb2: **********
[  894.429561][   T30] audit: type=1800 audit(894.395:293): pid=27922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9679" name="file2" dev="loop0" ino=261 res=0 errno=0
[  894.486679][   T29] usb 6-1: USB disconnect, device number 37
[  894.493095][ T2358] pvrusb2: Invalid write control endpoint
[  894.659022][ T5621] BTRFS info (device loop0 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  894.723494][T28002] libceph: resolve '4' (ret=-3): failed
[  895.031388][ T1147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  895.183912][ T5757] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  895.310264][T28018] loop5: detected capacity change from 0 to 8
[  895.380024][ T5757] usb 4-1: Using ep0 maxpacket: 16
[  895.431169][ T2358] pvrusb2: Invalid write control endpoint
[  895.442082][ T5757] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  895.473124][ T5757] usb 4-1: config 0 has no interface number 0
[  895.521253][ T5757] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  895.543789][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  895.594946][ T5757] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  895.627395][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  895.642534][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  895.671259][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  895.685628][ T5757] usb 4-1: Product: syz
[  895.711447][ T5757] usb 4-1: SerialNumber: syz
[  895.726483][ T2358] pvrusb2: Device being rendered inoperable
[  895.769040][T28026] netlink: 'syz.4.9715': attribute type 2 has an invalid length.
[  895.778070][ T5757] usb 4-1: config 0 descriptor??
[  895.789074][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  895.811479][ T5757] cm109 4-1:0.8: invalid payload size 208, expected 4
[  895.821487][T28026] netlink: 723 bytes leftover after parsing attributes in process `syz.4.9715'.
[  895.836183][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  895.907247][ T5757] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input60
[  896.096064][ T2358] pvrusb2: Attached sub-driver cx25840
[  896.155625][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  896.214237][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  896.370636][    C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  896.371240][   T10] usb 4-1: USB disconnect, device number 35
[  896.377631][    C1] cm109 4-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[  896.438042][T28039] loop4: detected capacity change from 0 to 64
[  896.527147][   T10] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  896.874303][T28055] loop1: detected capacity change from 0 to 128
[  896.890945][T28055] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  896.934725][T28055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  897.293543][T28068] netlink: 'syz.3.9733': attribute type 21 has an invalid length.
[  897.323656][T28068] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9733'.
[  897.356420][T28068] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9733'.
[  897.570372][T28077] vivid-000: =================  START STATUS  =================
[  897.670250][T28077] vivid-000: Radio HW Seek Mode: Bounded
[  897.718107][T28077] vivid-000: Radio Programmable HW Seek: false
[  897.737539][T28077] vivid-000: RDS Rx I/O Mode: Block I/O
[  897.746793][T28077] vivid-000: Generate RBDS Instead of RDS: false
[  897.755717][T28077] vivid-000: RDS Reception: true
[  897.762473][T28077] vivid-000: RDS Program Type: 0 inactive
[  897.771418][T28077] vivid-000: RDS PS Name:  inactive
[  897.783707][T28077] vivid-000: RDS Radio Text:  inactive
[  897.796773][T28077] vivid-000: RDS Traffic Announcement: false inactive
[  897.813258][T28077] vivid-000: RDS Traffic Program: false inactive
[  897.829815][T28077] vivid-000: RDS Music: false inactive
[  897.850316][ T5776] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  897.861385][T28077] vivid-000: ==================  END STATUS  ==================
[  897.915196][T28089] nbd: couldn't find a device at index 17
[  898.044189][ T5776] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3
[  898.076918][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.114380][ T5776] usb 3-1: Product: syz
[  898.132773][ T5776] usb 3-1: Manufacturer: syz
[  898.147757][ T5776] usb 3-1: SerialNumber: syz
[  898.170556][ T5776] usb 3-1: config 0 descriptor??
[  898.187594][ T5776] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now attached
[  898.240662][T24630] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  898.377504][T28099] loop5: detected capacity change from 0 to 256
[  898.405830][   T29] usb 3-1: USB disconnect, device number 44
[  898.429632][T24630] usb 1-1: Using ep0 maxpacket: 16
[  898.435724][   T29] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now disconnected
[  898.460354][T24630] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  898.489423][T24630] usb 1-1: config 0 has no interface number 0
[  898.507296][T28099] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  898.527011][T24630] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  898.567003][T24630] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  898.593198][T24630] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  898.620140][T24630] usb 1-1: Product: syz
[  898.637136][T24630] usb 1-1: SerialNumber: syz
[  898.667943][T24630] usb 1-1: config 0 descriptor??
[  898.676994][T28085] loop1: detected capacity change from 0 to 32768
[  898.688752][T28085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9741 (28085)
[  898.699551][T24630] cm109 1-1:0.8: invalid payload size 208, expected 4
[  898.744461][T24630] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input61
[  898.746264][T28085] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  898.777599][T28087] loop4: detected capacity change from 0 to 32768
[  898.819929][T28085] BTRFS info (device loop1): using sha256 checksum algorithm
[  899.060869][T28085] BTRFS info (device loop1): rebuilding free space tree
[  899.102426][T28121] loop2: detected capacity change from 0 to 22
[  899.142750][T28121] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  899.170073][T28121] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  899.216860][T28085] BTRFS info (device loop1): enabling ssd optimizations
[  899.216904][T28085] BTRFS info (device loop1): using spread ssd allocation scheme
[  899.216937][T28085] BTRFS info (device loop1): turning on async discard
[  899.216969][T28085] BTRFS info (device loop1): enabling free space tree
[  899.217001][T28085] BTRFS info (device loop1): force clearing of disk cache
[  899.319960][   T10] usb 4-1: new low-speed USB device number 36 using dummy_hcd
[  899.362452][    C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[  899.362502][    C1] ------------[ cut here ]------------
[  899.362518][    C1] URB ffff888037199900 submitted while active
[  899.362540][    C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#1: udevadm/28125
[  899.362628][    C1] Modules linked in:
[  899.362738][    C1] CPU: 1 UID: 0 PID: 28125 Comm: udevadm Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  899.362800][    C1] Tainted: [L]=SOFTLOCKUP
[  899.362817][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  899.362848][    C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  899.362913][    C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d ba b3 fa 48 8d 3d e6 2b 90 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  899.362956][    C1] RSP: 0018:ffffc90000a08af0 EFLAGS: 00010087
[  899.362990][    C1] RAX: 0000000000000509 RBX: ffff888037199900 RCX: ffffc90002311000
[  899.363020][    C1] RDX: 0000000000040000 RSI: ffff888037199900 RDI: ffffffff90e4ff80
[  899.363050][    C1] RBP: ffff888046d054a0 R08: 0000000000000001 R09: 0000000000000000
[  899.363079][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000083
[  899.363107][    C1] R13: ffff88807d675858 R14: 000000000000000f R15: 0000000000000000
[  899.363139][    C1] FS:  0000000000000000(0000) GS:ffff88812446e000(0000) knlGS:0000000000000000
[  899.363178][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  899.363207][    C1] CR2: 00007fc8b7046000 CR3: 000000008b6be000 CR4: 0000000000350ef0
[  899.363236][    C1] Call Trace:
[  899.363250][    C1]  <IRQ>
[  899.363268][    C1]  ? find_held_lock+0x2b/0x80
[  899.363353][    C1]  cm109_urb_irq_callback+0x473/0xa70
[  899.363409][    C1]  __usb_hcd_giveback_urb+0x38d/0x610
[  899.363468][    C1]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  899.363518][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.363580][    C1]  dummy_timer+0xda1/0x36c0
[  899.363646][ T5776] usb 1-1: USB disconnect, device number 39
[  899.363650][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.363702][    C1]  ? find_held_lock+0x2b/0x80
[  899.363772][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.363834][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.363896][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  899.363963][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.364016][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  899.364088][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  899.364165][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  899.364220][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.364272][    C1]  ? mark_held_locks+0x40/0x70
[  899.364325][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  899.364391][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  899.364448][    C1]  __hrtimer_run_queues+0x470/0xa00
[  899.364533][    C1]  hrtimer_run_softirq+0x17d/0x2c0
[  899.364603][    C1]  handle_softirqs+0x1ea/0xa00
[  899.364674][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  899.364734][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.364787][    C1]  ? _raw_spin_unlock+0x28/0x50
[  899.364850][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.364902][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x740
[  899.364976][    C1]  __irq_exit_rcu+0x162/0x210
[  899.365036][    C1]  irq_exit_rcu+0x9/0x30
[  899.365095][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  899.365164][    C1]  </IRQ>
[  899.365178][    C1]  <TASK>
[  899.365196][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  899.365245][    C1] RIP: 0010:lock_is_held_type+0xf5/0x140
[  899.365315][    C1] Code: ff ff ff ff 65 0f c1 15 f1 d5 81 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 47 af 86 f5 e9 42 af 86 f5 31 c0
[  899.365358][    C1] RSP: 0018:ffffc9000d1f6f68 EFLAGS: 00000282
[  899.365392][    C1] RAX: 0000000000000001 RBX: ffff88807d8b3438 RCX: 0000000000000001
[  899.365420][    C1] RDX: 0000000000000046 RSI: ffffffff8defb1fd RDI: ffffffff8c1c3a80
[  899.365450][    C1] RBP: ffff88801ef03d80 R08: 0000000000000005 R09: 0000000000000300
[  899.365479][    C1] R10: 0000000000000300 R11: 0000000000000000 R12: 00000000ffffffff
[  899.365507][    C1] R13: 0000000000000246 R14: ffff88801ef04910 R15: 0000000000000000
[  899.365568][    C1]  mt_validate+0x1f9e/0x31e0
[  899.365637][    C1]  ? __pfx_mt_validate+0x10/0x10
[  899.365677][    C1]  ? trace_ma_write+0x81/0x220
[  899.365759][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.365820][    C1]  validate_mm+0xa8/0x4e0
[  899.365878][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.365935][    C1]  ? __pfx_uprobe_mmap+0x10/0x10
[  899.365993][    C1]  ? __pfx_validate_mm+0x10/0x10
[  899.366055][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.366110][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.366163][    C1]  ? vma_adjust_trans_huge+0x2e4/0x560
[  899.366224][    C1]  __split_vma+0xa71/0xd90
[  899.366281][    C1]  ? __pfx___split_vma+0x10/0x10
[  899.366343][    C1]  ? __pfx_mas_prev+0x10/0x10
[  899.366385][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.366453][    C1]  vms_gather_munmap_vmas+0x3a5/0x1720
[  899.366519][    C1]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  899.366589][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.366642][    C1]  ? mas_walk+0x6ef/0x9b0
[  899.366724][    C1]  __mmap_region+0x4aa/0x2da0
[  899.366786][    C1]  ? __pfx___mmap_region+0x10/0x10
[  899.366838][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.366902][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.366955][    C1]  ? find_held_lock+0x2b/0x80
[  899.367048][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.367114][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.367168][    C1]  ? lock_acquire+0x1b1/0x370
[  899.367221][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.367294][    C1]  ? process_measurement+0x109c/0x2350
[  899.367361][    C1]  ? process_measurement+0x109c/0x2350
[  899.367425][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.367487][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.367539][    C1]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  899.367580][    C1]  ? __entry_text_end+0x1020b8/0x1020b9
[  899.367634][    C1]  ? __pfx___might_resched+0x10/0x10
[  899.367697][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  899.367747][    C1]  ? process_measurement+0x10a9/0x2350
[  899.367812][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.367869][    C1]  ? rcu_is_watching+0x12/0xc0
[  899.368003][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.368066][    C1]  mmap_region+0x35d/0x620
[  899.368127][    C1]  ? __pfx_mmap_region+0x10/0x10
[  899.368184][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.368238][    C1]  ? thp_get_unmapped_area_vmflags+0x2cb/0x320
[  899.368286][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.368339][    C1]  ? cap_mmap_addr+0x4b/0x120
[  899.368403][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.368455][    C1]  ? security_mmap_addr+0x71/0x1e0
[  899.368506][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.368557][    C1]  ? __get_unmapped_area+0x255/0x3e0
[  899.368633][    C1]  do_mmap+0xc63/0x12f0
[  899.368707][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.368761][    C1]  ? __pfx_do_mmap+0x10/0x10
[  899.368826][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.368888][    C1]  ? __pfx_down_write_killable+0x10/0x10
[  899.368948][    C1]  vm_mmap_pgoff+0x29e/0x470
[  899.369030][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  899.369099][    C1]  ? __fget_files+0x215/0x3d0
[  899.369153][    C1]  ? __fget_files+0x21f/0x3d0
[  899.369207][    C1]  ksys_mmap_pgoff+0x3cb/0x610
[  899.369277][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.369330][    C1]  ? find_held_lock+0x2b/0x80
[  899.369400][    C1]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  899.369465][    C1]  ? exc_page_fault+0x6f/0xd0
[  899.369530][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.369599][    C1]  __x64_sys_mmap+0x125/0x190
[  899.369661][    C1]  do_syscall_64+0x10b/0xf80
[  899.369743][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.369791][    C1] RIP: 0033:0x7fc8b7071242
[  899.369827][    C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
[  899.369881][    C1] RSP: 002b:00007ffdd1489128 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  899.369925][    C1] RAX: ffffffffffffffda RBX: 00007fc8b6fa2000 RCX: 00007fc8b7071242
[  899.369957][    C1] RDX: 0000000000000005 RSI: 000000000000f000 RDI: 00007fc8b6fa2000
[  899.369988][    C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000004000
[  899.370017][    C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffdd1489178
[  899.370048][    C1] R13: 00007fc8b7045b20 R14: 00007ffdd1489560 R15: 00000fffba291228
[  899.370106][    C1]  </TASK>
[  899.370128][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  899.370161][    C1] CPU: 1 UID: 0 PID: 28125 Comm: udevadm Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  899.370224][    C1] Tainted: [L]=SOFTLOCKUP
[  899.370242][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  899.370270][    C1] Call Trace:
[  899.370285][    C1]  <IRQ>
[  899.370302][    C1]  dump_stack_lvl+0x100/0x190
[  899.370354][    C1]  vpanic+0x552/0x970
[  899.370399][    C1]  ? __pfx_vpanic+0x10/0x10
[  899.370460][    C1]  panic+0xd1/0xe0
[  899.370503][    C1]  ? __pfx_panic+0x10/0x10
[  899.370571][    C1]  check_panic_on_warn.cold+0x19/0x34
[  899.370621][    C1]  ? usb_submit_urb+0x15fa/0x1910
[  899.370680][    C1]  __warn.cold+0x191/0x328
[  899.370730][    C1]  __report_bug+0x296/0x3d0
[  899.370797][    C1]  ? usb_submit_urb+0x15fa/0x1910
[  899.370871][    C1]  ? __pfx___report_bug+0x10/0x10
[  899.370936][    C1]  ? stack_trace_save+0x8e/0xc0
[  899.370993][    C1]  ? __pfx_dev_printk_emit+0x10/0x10
[  899.371054][    C1]  ? kasan_save_stack+0x30/0x50
[  899.371121][    C1]  report_bug_entry+0xe1/0x290
[  899.371191][    C1]  ? usb_submit_urb+0x15fd/0x1910
[  899.371280][    C1]  handle_bug+0x1cd/0x2a0
[  899.371328][    C1]  exc_invalid_op+0x17/0x50
[  899.371377][    C1]  asm_exc_invalid_op+0x1a/0x20
[  899.371421][    C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  899.371484][    C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d ba b3 fa 48 8d 3d e6 2b 90 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  899.371529][    C1] RSP: 0018:ffffc90000a08af0 EFLAGS: 00010087
[  899.371564][    C1] RAX: 0000000000000509 RBX: ffff888037199900 RCX: ffffc90002311000
[  899.371594][    C1] RDX: 0000000000040000 RSI: ffff888037199900 RDI: ffffffff90e4ff80
[  899.371624][    C1] RBP: ffff888046d054a0 R08: 0000000000000001 R09: 0000000000000000
[  899.371653][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000083
[  899.371681][    C1] R13: ffff88807d675858 R14: 000000000000000f R15: 0000000000000000
[  899.371736][    C1]  ? find_held_lock+0x2b/0x80
[  899.371820][    C1]  cm109_urb_irq_callback+0x473/0xa70
[  899.371881][    C1]  __usb_hcd_giveback_urb+0x38d/0x610
[  899.371941][    C1]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  899.371993][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.372054][    C1]  dummy_timer+0xda1/0x36c0
[  899.372123][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.372177][    C1]  ? find_held_lock+0x2b/0x80
[  899.372249][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.372313][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.372367][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  899.372434][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.372487][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  899.372561][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  899.372640][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  899.372696][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.372748][    C1]  ? mark_held_locks+0x40/0x70
[  899.372800][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  899.372874][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  899.372934][    C1]  __hrtimer_run_queues+0x470/0xa00
[  899.373017][    C1]  hrtimer_run_softirq+0x17d/0x2c0
[  899.373089][    C1]  handle_softirqs+0x1ea/0xa00
[  899.373161][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  899.373223][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.373276][    C1]  ? _raw_spin_unlock+0x28/0x50
[  899.373337][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.373394][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x740
[  899.373473][    C1]  __irq_exit_rcu+0x162/0x210
[  899.373537][    C1]  irq_exit_rcu+0x9/0x30
[  899.373599][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  899.373671][    C1]  </IRQ>
[  899.373687][    C1]  <TASK>
[  899.373705][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  899.373755][    C1] RIP: 0010:lock_is_held_type+0xf5/0x140
[  899.373827][    C1] Code: ff ff ff ff 65 0f c1 15 f1 d5 81 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 47 af 86 f5 e9 42 af 86 f5 31 c0
[  899.373876][    C1] RSP: 0018:ffffc9000d1f6f68 EFLAGS: 00000282
[  899.373912][    C1] RAX: 0000000000000001 RBX: ffff88807d8b3438 RCX: 0000000000000001
[  899.373941][    C1] RDX: 0000000000000046 RSI: ffffffff8defb1fd RDI: ffffffff8c1c3a80
[  899.373971][    C1] RBP: ffff88801ef03d80 R08: 0000000000000005 R09: 0000000000000300
[  899.374000][    C1] R10: 0000000000000300 R11: 0000000000000000 R12: 00000000ffffffff
[  899.374029][    C1] R13: 0000000000000246 R14: ffff88801ef04910 R15: 0000000000000000
[  899.374089][    C1]  mt_validate+0x1f9e/0x31e0
[  899.374159][    C1]  ? __pfx_mt_validate+0x10/0x10
[  899.374199][    C1]  ? trace_ma_write+0x81/0x220
[  899.374283][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.374347][    C1]  validate_mm+0xa8/0x4e0
[  899.374397][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.374455][    C1]  ? __pfx_uprobe_mmap+0x10/0x10
[  899.374516][    C1]  ? __pfx_validate_mm+0x10/0x10
[  899.374581][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.374639][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.374694][    C1]  ? vma_adjust_trans_huge+0x2e4/0x560
[  899.374753][    C1]  __split_vma+0xa71/0xd90
[  899.374811][    C1]  ? __pfx___split_vma+0x10/0x10
[  899.374882][    C1]  ? __pfx_mas_prev+0x10/0x10
[  899.374926][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.374997][    C1]  vms_gather_munmap_vmas+0x3a5/0x1720
[  899.375065][    C1]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  899.375138][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.375194][    C1]  ? mas_walk+0x6ef/0x9b0
[  899.375280][    C1]  __mmap_region+0x4aa/0x2da0
[  899.375344][    C1]  ? __pfx___mmap_region+0x10/0x10
[  899.375399][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.375460][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.375516][    C1]  ? find_held_lock+0x2b/0x80
[  899.375612][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.375681][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.375737][    C1]  ? lock_acquire+0x1b1/0x370
[  899.375793][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.375877][    C1]  ? process_measurement+0x109c/0x2350
[  899.375947][    C1]  ? process_measurement+0x109c/0x2350
[  899.376015][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.376081][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.376137][    C1]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  899.376180][    C1]  ? __entry_text_end+0x1020b8/0x1020b9
[  899.376238][    C1]  ? __pfx___might_resched+0x10/0x10
[  899.376305][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  899.376358][    C1]  ? process_measurement+0x10a9/0x2350
[  899.376425][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.376480][    C1]  ? rcu_is_watching+0x12/0xc0
[  899.376613][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.376677][    C1]  mmap_region+0x35d/0x620
[  899.376738][    C1]  ? __pfx_mmap_region+0x10/0x10
[  899.376796][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.376857][    C1]  ? thp_get_unmapped_area_vmflags+0x2cb/0x320
[  899.376909][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.376965][    C1]  ? cap_mmap_addr+0x4b/0x120
[  899.377032][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.377086][    C1]  ? security_mmap_addr+0x71/0x1e0
[  899.377141][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.377196][    C1]  ? __get_unmapped_area+0x255/0x3e0
[  899.377276][    C1]  do_mmap+0xc63/0x12f0
[  899.377351][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.377408][    C1]  ? __pfx_do_mmap+0x10/0x10
[  899.377474][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.377531][    C1]  ? __pfx_down_write_killable+0x10/0x10
[  899.377591][    C1]  vm_mmap_pgoff+0x29e/0x470
[  899.377673][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  899.377743][    C1]  ? __fget_files+0x215/0x3d0
[  899.377798][    C1]  ? __fget_files+0x21f/0x3d0
[  899.377858][    C1]  ksys_mmap_pgoff+0x3cb/0x610
[  899.377931][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.377988][    C1]  ? find_held_lock+0x2b/0x80
[  899.378061][    C1]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  899.378130][    C1]  ? exc_page_fault+0x6f/0xd0
[  899.378198][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.378269][    C1]  __x64_sys_mmap+0x125/0x190
[  899.378331][    C1]  do_syscall_64+0x10b/0xf80
[  899.378411][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.378458][    C1] RIP: 0033:0x7fc8b7071242
[  899.378493][    C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
[  899.378539][    C1] RSP: 002b:00007ffdd1489128 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  899.378582][    C1] RAX: ffffffffffffffda RBX: 00007fc8b6fa2000 RCX: 00007fc8b7071242
[  899.378614][    C1] RDX: 0000000000000005 RSI: 000000000000f000 RDI: 00007fc8b6fa2000
[  899.378644][    C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000004000
[  899.378673][    C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffdd1489178
[  899.378704][    C1] R13: 00007fc8b7045b20 R14: 00007ffdd1489560 R15: 00000fffba291228
[  899.378762][    C1]  </TASK>
[  899.379009][    C1] Kernel Offset: disabled