last executing test programs:

14m48.401757998s ago: executing program 4 (id=8479):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x6, 0x1], [0xfb]], '\x00', [{0x2, 0xf8}, {}, {}, {0x1, 0x1, 0x0, 0x1}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x1000000}, {}, {0xfffffffd}, {0xb17}], '\x00', 0x0, 0x0, 0x0, 0xf8})

14m48.249798592s ago: executing program 4 (id=8481):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

14m46.014751566s ago: executing program 4 (id=8515):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21)

14m44.682987428s ago: executing program 4 (id=8542):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

14m44.410114365s ago: executing program 4 (id=8549):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0xb5c10e8078c069ad, {0x3}})

14m43.619745845s ago: executing program 4 (id=8561):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
io_uring_setup(0x1691, &(0x7f0000000cc0)={0x0, 0x631d, 0x2, 0x0, 0x2d8})

14m43.421269019s ago: executing program 32 (id=8561):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
io_uring_setup(0x1691, &(0x7f0000000cc0)={0x0, 0x631d, 0x2, 0x0, 0x2d8})

4.534363283s ago: executing program 2 (id=26066):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x5606, 0xf7df)

4.369502276s ago: executing program 2 (id=26069):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000040)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42304822a5347abc11fb5664dc79199a73e7d2355a95e3fa7577f5d74363ba00855dcdff35c779f", 0x5e}], 0x1}, 0x24000008)

4.25047188s ago: executing program 2 (id=26070):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000cc0)={0x0, 0xfb, 0x5c3, 0x2, 0x8, "de47b8ff9d6748d0cfe067ceecce19a1", "e77cea838f4d9195d502fe050ff6605669d6842b3a7aef92e027d0453e1988ccacd5ba002aca94aa808af5cb373490bb10c8fa90171c08da573a9cca85a0b80705fef230286f98f73ed4e7077b50abb79fb4100455e18848eac17d76e553985400302bac2c326fb79951b48423c8909c0a7d172b398ca2aa26e3b1d68cb540a447c833e8f96d7de6f80db6cbedd4106deb1c76f8f7e2e88745582f9775328d376d394bc4965264f6e3019684b847e28a0f5203d1a60c7ca5ac32049d7de58a4044f3219d6d0012b648271939e53d9a12b41134c5117b8d2b06a2553e79c954bd08d07453998ca1825566732ad06c6a2bf331a6ec79c62e0ee9992583e485f2a677aaf8fdc87884c717bd4c2e5ffc721228ef75e65c39f63db9b78cf767ea57aea0226be630dc3e0c8ef614240a599ab6cc911562b027b7f20603603ec99a8097dfd43ca1ad44a7e89e1683f7162b738fbbb7b8b14739e974d6b689b18a76748d9d812d77aa09bae974fcd6dde55074a39036a4df8596cab7187310aab101fe818276a9fa831e3adcdd91c90e710e8a6ab5369a8bf021d7c26340463b98f132d3d7a913c85125a2bf0e606667214aad84b3edac14e2a21ac7c6f8d2155904b32a92aa379228c8cbd52e9b97f577158e383950e76811ae48c088a31a36c67a1147d84a1ce0dff9ad71e97786e399544a08595b00af374f673883e39c5466e4417e85134854835deb9cafcfef92e68107bf98bd97d5e15193b5cbf0e806688559e58df6f5fa663cbb0f5b94976f3d6355fe2023b1458c5fb1cb72fe8c7a5a476eb251879b20add33df597ae1e488f5e3b6c3f89b28459ace10f316fe6635ee41741a95c35bd99c4236d0424481f878c757a9d94e184e1808ee623efec69bd0d20b9e2aabf71b7805f07bbd10a1f2b3bf6cab9b706650a4b18cbf4fa9aa365abab55ef56efa291ef1407ead2d93d796cd93a4e2754ca680636a615efe8ae51e3c7246a0686001513cdc7f4f9678aaeaab9384d5a3ad49ca5dff70fba3e411c5bc764c4ef908cb0d9e231b9f620012ed430dc34ac4214c3c781f3c9180ffb15268cb741a41f97019c454b3a1967559c486f51d089e4ee60000398ceb36c6c7871c14cb2ba5b05d6f308dcdde42acd4403970ef7c1bb0675f367c2b1b1d2103892215dcf95774ad22de20732e5285de7c47362e4f87414e6dce2278fbd3202cd8104b21637877bfcde73f9cd7e9d4560d1f740311e4291f68f02dd25901caf0adf3b169d097b12601f8d1cdc3814f6c357c3ec4af80c6f986f72650a1c10d4b9abd3d69ef558b3aab234b7e177f1b0cfd93a660ca70737db7b63ebbe738463b4eefa76bc7c9ffed422efaaa3ebcdceffc586575a0ee60b97dfcbe63a05a4198cad2c3baff754bef2d781bd89d9c9b04fa7c57c9b5f7b81ad889b4571ff31b9f361a708854775943965878f532f803046c3ab3fa5edb902391b640b430d2f005a4f7301fc081b9a236cb41eb4917ff71bf047554a6f5914a29a002364503a38946c65829a7ab9cf44af99396665eacf398f422943f9752c4cf772d27891f67e501983d5419d70ae0d69cc8f933fe9b58406cabab785372618a8ceb29e5e71bc0059135fde5c394e4e077112ebff1b69b36e3e320a1574e518ba43d5640a1429649f32f51712605179b2608cc16626c7db5095e61be3c24165a1fbffe9670f06930cf02969970b9e00807f620913998f548bdc207f6902197f9d8bf7e786b84424cf548278e6f3b65d5f090ba275b7237d2f5bfbfcb5d38a010c70c28f86184a3dab25cc9cf530da12dd9a6f0c9c7f3cded1130de715452beece1607e25904ab98de6b1388c15c37ddb8b19624e5ec72a7c63f496b6eea2d26d44696506d87a0f949c478327f1c9b28656281162e694933aa93f13adb1ed966454bdf85a07e5124d5d8b17a13825a1aadf7756a474563ebc88a4521f457ccb4e35dd56c70231383c90a62c8af47f22d8e9c3574500f44cd38eb34bdadf1b199203553191ee444c79a33b294ee0de9fafe9625fdf3c8462c32"}, 0x5c3, 0x0)

2.67928162s ago: executing program 3 (id=26093):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000290000004300000001000000000000001000000000000000290000000b"], 0x80}}], 0x2, 0x30044080)

2.512719904s ago: executing program 5 (id=26095):
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r0, r0}, 0x0, 0x0, 0x0)

2.498594615s ago: executing program 3 (id=26096):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.29878347s ago: executing program 5 (id=26098):
syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2a, &(0x7f0000000380)=@string={0x2a, 0x3, "5eb259324e60d0291a729b2cd7b6a6906167283bbf52f5802cfce2c873fab576a3bf8dd2ca0d1d64"}}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="9400000010000d0400000000000000000000c300", @ANYRES32=0x0, @ANYBLOB="00000000498005000a000100000000004b960000140035006d6163766c616e30000000000000000008001e00ff0300003c002b8008000300"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

2.130283255s ago: executing program 3 (id=26099):
r0 = io_uring_setup(0x2fac, &(0x7f0000000500)={0x0, 0x9d1d, 0x40, 0x1007, 0x125})
close_range(r0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000000)=0x4, 0x0, 0x4, 0x0, 0x0, 0x1)

2.117442505s ago: executing program 1 (id=26100):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000200)={[{@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x54fcfa75}}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@dots}, {@dots}, {@fat=@tz_utc}]}, 0x1, 0x259, &(0x7f0000000540)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
sendfile(r0, r0, &(0x7f0000000000)=0xa01f, 0x100000110)

1.804407293s ago: executing program 1 (id=26103):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}}}, 0x0)

1.672491717s ago: executing program 1 (id=26105):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000))

1.632902218s ago: executing program 2 (id=26106):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)

1.491717601s ago: executing program 1 (id=26108):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)

1.412355573s ago: executing program 0 (id=26109):
r0 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
kcmp(r0, r0, 0x0, r2, r1)

1.329469775s ago: executing program 5 (id=26110):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0)

1.326863305s ago: executing program 1 (id=26111):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000800)=@delqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800)

1.254141017s ago: executing program 0 (id=26112):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000009c0)={0x28, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000)

1.198480798s ago: executing program 3 (id=26113):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x5)

1.102078031s ago: executing program 5 (id=26114):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000140)={[{@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@part}, {@force}, {@gid}, {@nobarrier}, {@creator={'creator', 0x3d, "8d7b6491"}}]}, 0x44, 0x73c, &(0x7f0000000d00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x144)
statfs(&(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000700)=""/74)

1.092520572s ago: executing program 0 (id=26115):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfa, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40040)

1.078619642s ago: executing program 1 (id=26116):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

935.646136ms ago: executing program 0 (id=26117):
r0 = syz_ublk_setup_io_uring(0x11e, &(0x7f00000000c0)={0x0, 0xcae, 0x80, 0x103, 0x32}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0x7ca4, &(0x7f0000000500)={0x0, 0x1000001c, 0x27, 0x2, 0x24f, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000))

777.08843ms ago: executing program 5 (id=26118):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="dd", 0x1}], 0x1, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x1011)
close_range(r0, 0xffffffffffffffff, 0x0)

776.91272ms ago: executing program 0 (id=26119):
unshare(0x22020600)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x60080, 0x0)
ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000002c0)={0x1, 0x2, 0x0, 0x1})

279.013942ms ago: executing program 0 (id=26120):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x2, 0x28, {0x28, 0xa, "f70ba38103000000841d8f0000000000cb4fdca0560f920d54f365c5b1d63ee44fbf6fc93f08"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

229.552614ms ago: executing program 2 (id=26121):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70b92c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x22}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014)

214.945774ms ago: executing program 3 (id=26122):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x106f)

44.274959ms ago: executing program 2 (id=26123):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x300})

27.032649ms ago: executing program 3 (id=26124):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='%\x00', 0x0)

0s ago: executing program 5 (id=26125):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b)
write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a)

kernel console output (not intermixed with test programs):

(device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1485.801172][ T4638] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1485.897067][ T4689] netlink: 'syz.5.23497': attribute type 4 has an invalid length.
[ 1485.918574][ T4638] ntfs: volume version 3.1.
[ 1485.975156][ T4638] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 1486.039491][ T4638] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1486.114285][ T4638] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[ 1486.211659][ T4638] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[ 1486.248017][ T4638] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[ 1486.574068][ T4729] loop2: detected capacity change from 0 to 512
[ 1486.588493][ T4728] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1486.673663][ T4729] EXT4-fs (loop2): old and new quota format mixing
[ 1486.776085][ T4231] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1487.284394][ T4782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23525'.
[ 1487.388636][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1487.497743][ T4231] usb 2-1: config 3 has an invalid interface number: 73 but max is 1
[ 1487.534717][ T4231] usb 2-1: config 3 has no interface number 1
[ 1487.545707][ T4796] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23530'.
[ 1487.576361][ T4231] usb 2-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7
[ 1487.618521][ T4802] netlink: 'syz.2.23532': attribute type 3 has an invalid length.
[ 1487.628847][ T4231] usb 2-1: config 3 interface 0 has no altsetting 0
[ 1487.654347][ T4231] usb 2-1: config 3 interface 73 has no altsetting 0
[ 1488.054444][ T4827] loop5: detected capacity change from 0 to 4096
[ 1488.099998][ T4231] usb 2-1: string descriptor 0 read error: -22
[ 1488.115607][ T4231] usb 2-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7
[ 1488.125371][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1488.235359][ T4231] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1488.241794][ T4231] dvb_usb_af9035: probe of 2-1:3.0 failed with error -22
[ 1488.280087][ T4827] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1488.491477][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23546'.
[ 1488.515558][ T4231] usb 2-1: USB disconnect, device number 100
[ 1488.573232][ T4860] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1488.838394][ T4883] SET target dimension over the limit!
[ 1489.203914][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:bb) already exists on: batadv_slave_0
[ 1489.281601][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1489.313683][ T4904] device bond8 entered promiscuous mode
[ 1489.321054][ T4904] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1489.571548][ T4961] netlink: 'syz.3.23572': attribute type 11 has an invalid length.
[ 1489.579590][ T4961] netlink: 448 bytes leftover after parsing attributes in process `syz.3.23572'.
[ 1489.705361][ T4973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23576'.
[ 1490.139333][ T5007] netlink: 'syz.5.23590': attribute type 21 has an invalid length.
[ 1490.206243][ T5007] netlink: 132 bytes leftover after parsing attributes in process `syz.5.23590'.
[ 1490.221749][ T5016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23593'.
[ 1490.883470][ T5097] loop2: detected capacity change from 0 to 24
[ 1491.003806][ T5104] netlink: 'syz.1.23608': attribute type 21 has an invalid length.
[ 1491.025035][ T5097] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1491.053569][ T5097] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1491.055682][ T5104] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23608'.
[ 1491.131492][ T5097] VFS: Lookup of 'file0' in romfs loop2 would have caused loop
[ 1491.194535][T18190] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1491.922116][T18190] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[ 1491.931445][T18190] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[ 1492.014933][T18190] usb 4-1: Product: syz
[ 1492.041242][T18190] usb 4-1: SerialNumber: syz
[ 1492.069325][T18190] usb 4-1: config 0 descriptor??
[ 1492.190695][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23635'.
[ 1492.319400][ T4229] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1492.433737][T18190] ldusb 4-1:0.0: Interrupt in endpoint not found
[ 1492.468297][T18190] usb 4-1: USB disconnect, device number 104
[ 1492.592919][ T4229] usb 2-1: Using ep0 maxpacket: 32
[ 1492.638879][ T5212] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23643'.
[ 1492.803833][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1492.830112][ T4229] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1492.860819][ T5224] program syz.5.23650 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1493.087726][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23653'.
[ 1493.089895][ T4229] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[ 1493.140184][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1493.175981][ T4229] usb 2-1: Product: syz
[ 1493.206633][ T4229] usb 2-1: Manufacturer: syz
[ 1493.213115][ T5246] tmpfs: Bad value for 'mpol'
[ 1493.228794][ T4229] usb 2-1: SerialNumber: syz
[ 1493.256727][ T4229] usb 2-1: config 0 descriptor??
[ 1493.323173][ T4229] qmi_wwan 2-1:0.0: bogus CDC Union: master=1, slave=0
[ 1493.330217][ T4229] qmi_wwan: probe of 2-1:0.0 failed with error -22
[ 1493.648528][ T5279] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 1493.653426][ T5277] program syz.0.23664 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1493.685428][ T4229] usb 2-1: USB disconnect, device number 101
[ 1493.960276][ T5303] loop3: detected capacity change from 0 to 64
[ 1494.254239][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23680'.
[ 1494.333443][ T5320] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.23681'.
[ 1494.550663][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23684'.
[ 1494.997812][    C1] sd 0:0:1:0: tag#621 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1495.007696][    C1] sd 0:0:1:0: tag#621 CDB: Mode Sense(10)
[ 1495.013493][    C1] sd 0:0:1:0: tag#621 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e
[ 1495.022476][    C1] sd 0:0:1:0: tag#621 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30
[ 1495.031473][    C1] sd 0:0:1:0: tag#621 CDB[20]: 8b 52 18
[ 1495.105278][ T5358] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[ 1495.226595][ T5369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23697'.
[ 1495.229492][ T5300] loop2: detected capacity change from 0 to 32768
[ 1495.652875][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23703'.
[ 1495.676536][ T5327] loop3: detected capacity change from 0 to 32768
[ 1495.777476][ T5327] ERROR: (device loop3): diAllocAG: numfree > numinos
[ 1495.777476][ T5327] 
[ 1495.868253][ T5327] ERROR: (device loop3): remounting filesystem as read-only
[ 1495.875594][ T5327] ialloc: diAlloc returned -5!
[ 1496.238019][ T5418] loop2: detected capacity change from 0 to 64
[ 1497.069097][ T5495] loop2: detected capacity change from 0 to 512
[ 1497.273083][ T5495] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1497.380557][ T5519] netlink: 96 bytes leftover after parsing attributes in process `syz.3.23743'.
[ 1497.459429][ T5519] netlink: 96 bytes leftover after parsing attributes in process `syz.3.23743'.
[ 1497.468701][ T5521] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1497.726522][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.23760'.
[ 1498.688644][ T4231] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1498.731563][ T5632] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1498.738013][ T5633] xt_TCPMSS: Only works on TCP SYN packets
[ 1498.845666][ T5642] loop5: detected capacity change from 0 to 64
[ 1498.958892][  T144] attempt to access beyond end of device
[ 1498.958892][  T144] loop5: rw=1, want=16777218, limit=64
[ 1498.958921][  T144] Buffer I/O error on dev loop5, logical block 8388608, lost async page write
[ 1499.256934][ T4231] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[ 1499.256969][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[ 1499.256991][ T4231] usb 2-1: Product: syz
[ 1499.257008][ T4231] usb 2-1: SerialNumber: syz
[ 1499.259858][ T4231] usb 2-1: config 0 descriptor??
[ 1499.411132][ T5676] loop5: detected capacity change from 0 to 2048
[ 1499.435523][ T5676] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1499.472372][ T5682] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1499.565825][ T4231] ldusb 2-1:0.0: Interrupt in endpoint not found
[ 1499.568824][ T4231] usb 2-1: USB disconnect, device number 102
[ 1500.002811][ T5706] loop3: detected capacity change from 0 to 64
[ 1500.268130][T10532] attempt to access beyond end of device
[ 1500.268130][T10532] loop3: rw=1, want=16777218, limit=64
[ 1500.306446][T18190] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1500.345942][T10532] Buffer I/O error on dev loop3, logical block 8388608, lost async page write
[ 1500.704718][T18190] usb 6-1: Using ep0 maxpacket: 32
[ 1500.715379][ T5733] loop2: detected capacity change from 0 to 512
[ 1500.861361][ T5733] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1500.868479][ T5733] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1500.885590][T18190] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1500.912720][T18190] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1500.954941][T18190] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1500.964032][ T5733] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1501.008400][T18190] usb 6-1: config 1 has no interface number 0
[ 1501.014566][T18190] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1501.097786][T18190] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1501.136717][T18190] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1501.156662][T18190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1501.190910][ T5733] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,nogrpid. Quota mode: none.
[ 1501.236576][T18190] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[ 1501.371511][ T5762] gre0: Master is either lo or non-ether device
[ 1501.469014][T18190] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values
[ 1501.482104][T18190] snd_usb_pod 6-1:1.1: invalid control EP
[ 1501.523733][T18190] snd_usb_pod 6-1:1.1: cannot start listening: -22
[ 1501.583404][ T5733] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[ 1501.583742][T18190] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[ 1501.679632][T18190] snd_usb_pod: probe of 6-1:1.1 failed with error -22
[ 1501.733997][T18190] usb 6-1: USB disconnect, device number 64
[ 1501.925141][ T5792] kAFS: unable to lookup cell 'Þ({^ú@'
[ 1502.054025][ T5795] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5795]
[ 1502.430240][ T5817] __nla_validate_parse: 1 callbacks suppressed
[ 1502.430260][ T5817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23838'.
[ 1502.914415][ T5854] netlink: 'syz.5.23851': attribute type 3 has an invalid length.
[ 1503.008440][ T5854] netlink: 'syz.5.23851': attribute type 1 has an invalid length.
[ 1503.128161][ T5861] IPv6: sit4: Disabled Multicast RS
[ 1503.444804][ T5891] loop3: detected capacity change from 0 to 512
[ 1503.529407][ T5891] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1503.529612][ T5891] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1503.529649][ T5891] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1503.595872][T17995] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1503.603001][ T5891] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,nogrpid. Quota mode: none.
[ 1503.777594][ T5891] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1503.808286][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1503.815106][ T5891] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.23864: Directory hole found for htree leaf block 0
[ 1503.815612][ T5891] EXT4-fs (loop3): Remounting filesystem read-only
[ 1503.826391][ T5909] gre0: Master is either lo or non-ether device
[ 1503.912558][T17995] usb 1-1: Using ep0 maxpacket: 8
[ 1504.071290][T17995] usb 1-1: config 0 has an invalid interface number: 200 but max is 0
[ 1504.071323][T17995] usb 1-1: config 0 has no interface number 0
[ 1504.071359][T17995] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1504.071385][T17995] usb 1-1: config 0 interface 200 has no altsetting 0
[ 1504.184270][ T5928] IPv6: sit5: Disabled Multicast RS
[ 1504.238814][T17995] usb 1-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9
[ 1504.238850][T17995] usb 1-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3
[ 1504.238872][T17995] usb 1-1: Product: syz
[ 1504.238886][T17995] usb 1-1: Manufacturer: syz
[ 1504.238901][T17995] usb 1-1: SerialNumber: syz
[ 1504.241701][T17995] usb 1-1: config 0 descriptor??
[ 1504.492077][ T5943] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23876'.
[ 1504.497758][ T5877] udc-core: couldn't find an available UDC or it's busy
[ 1504.609329][ T5877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1504.715187][T17995] usbhid 1-1:0.200: couldn't find an input interrupt endpoint
[ 1504.755716][T17995] usb 1-1: USB disconnect, device number 111
[ 1504.827338][ T5961] netlink: 'syz.2.23881': attribute type 2 has an invalid length.
[ 1504.897209][ T5961] netlink: 'syz.2.23881': attribute type 8 has an invalid length.
[ 1504.913701][ T4490] usb 6-1: new full-speed USB device number 65 using dummy_hcd
[ 1504.994367][ T5961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23881'.
[ 1505.064122][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23883'.
[ 1505.230612][ T5983] netlink: 68 bytes leftover after parsing attributes in process `syz.1.23887'.
[ 1505.295973][ T5983] netlink: 48 bytes leftover after parsing attributes in process `syz.1.23887'.
[ 1505.324012][ T5986] netlink: 'syz.0.23889': attribute type 3 has an invalid length.
[ 1505.349971][ T4490] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[ 1505.368606][ T4490] usb 6-1: config 0 has no interface number 0
[ 1505.415686][ T5991] overlayfs: unrecognized mount option "\{\" or missing value
[ 1505.434339][ T4490] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1505.686863][ T4490] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1505.708438][ T4490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1505.776160][ T4490] usb 6-1: Product: syz
[ 1505.796362][ T4490] usb 6-1: Manufacturer: syz
[ 1505.821996][ T6017] CIFS mount error: No usable UNC path provided in device string!
[ 1505.821996][ T6017] 
[ 1505.832182][ T4490] usb 6-1: SerialNumber: syz
[ 1505.880774][ T4490] usb 6-1: config 0 descriptor??
[ 1505.907612][ T6017] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1505.960553][ T4490] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[ 1505.968128][ T4490] radio-si470x: probe of 6-1:0.35 failed with error -5
[ 1506.190610][ T4490] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A)
[ 1506.213910][ T6039] netlink: 'syz.3.23907': attribute type 3 has an invalid length.
[ 1506.258057][ T6039] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.23907'.
[ 1506.417939][ T4490] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71)
[ 1506.444835][ T4490] radio-raremono 6-1:0.35: V4L2 device registered as radio48
[ 1506.517363][ T4490] usb 6-1: USB disconnect, device number 65
[ 1506.561700][ T4490] radio-raremono 6-1:0.35: Thanko's Raremono disconnected
[ 1506.674445][T20972] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1506.973799][T20972] usb 1-1: Using ep0 maxpacket: 8
[ 1507.148311][ T6099] overlayfs: unrecognized mount option "\{\" or missing value
[ 1507.184561][T20972] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1507.310035][T20972] usb 1-1: config 127 has an invalid interface number: 1 but max is 0
[ 1507.344991][T20972] usb 1-1: config 127 has no interface number 0
[ 1507.351526][ T6110] netlink: 68 bytes leftover after parsing attributes in process `syz.3.23928'.
[ 1507.393740][T20972] usb 1-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16
[ 1507.423652][ T6110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.23928'.
[ 1507.444162][T20972] usb 1-1: config 127 interface 1 has no altsetting 0
[ 1507.662617][T20972] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89
[ 1507.700727][T20972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1507.768180][T20972] usb 1-1: Product: syz
[ 1507.772405][T20972] usb 1-1: Manufacturer: syz
[ 1507.831515][T20972] usb 1-1: SerialNumber: syz
[ 1507.891184][ T6136] loop2: detected capacity change from 0 to 2048
[ 1507.893545][ T6045] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1508.268340][ T6136] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[ 1508.312652][T20972] redrat3 1-1:127.1: Couldn't find all endpoints
[ 1508.378405][T20972] usb 1-1: USB disconnect, device number 112
[ 1508.438352][ T6165] netlink: 'syz.1.23945': attribute type 3 has an invalid length.
[ 1509.168075][ T6214] netlink: 'syz.3.23962': attribute type 29 has an invalid length.
[ 1509.391646][ T6235] autofs4:pid:6235:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d)
[ 1509.553187][ T6134] loop5: detected capacity change from 0 to 40427
[ 1509.638447][ T6134] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[ 1509.679147][ T6134] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1509.699529][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23972'.
[ 1509.742744][ T6134] F2FS-fs (loop5): invalid crc value
[ 1509.776149][ T6253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.23972'.
[ 1509.817971][ T6261] netlink: 'syz.2.23975': attribute type 29 has an invalid length.
[ 1509.827169][ T6134] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[ 1509.970408][ T6268] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1510.025869][ T6272] ax25_connect(): syz.2.23978 uses autobind, please contact jreuter@yaina.de
[ 1510.094992][ T6134] F2FS-fs (loop5): recover fsync data on readonly fs
[ 1510.172882][ T6134] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30
[ 1510.180200][ T6134] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1510.972227][ T6320] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1511.059634][ T6322] netlink: 'syz.3.23998': attribute type 25 has an invalid length.
[ 1511.067599][ T6322] netlink: 'syz.3.23998': attribute type 3 has an invalid length.
[ 1511.573994][T20972] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1511.604188][ T6353] autofs4:pid:6353:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d)
[ 1511.763691][ T4231] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[ 1511.815524][ T6366] netlink: 132 bytes leftover after parsing attributes in process `syz.5.24008'.
[ 1512.005865][ T6377] loop5: detected capacity change from 0 to 2048
[ 1512.040138][T20972] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 1512.052701][T20972] usb 2-1: config 0 has no interface number 0
[ 1512.058850][T20972] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10
[ 1512.113430][T20972] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024
[ 1512.209819][ T6377] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[ 1512.230353][ T4231] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[ 1512.244260][ T4231] usb 4-1: config 0 has no interface number 0
[ 1512.251114][ T4231] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1512.373701][T20972] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1512.418549][T20972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.447563][T20972] usb 2-1: Product: syz
[ 1512.466016][T20972] usb 2-1: Manufacturer: syz
[ 1512.501086][T20972] usb 2-1: SerialNumber: syz
[ 1512.523561][T20972] usb 2-1: config 0 descriptor??
[ 1512.528378][ T4231] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1512.552002][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.566625][ T6334] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1512.575662][ T4231] usb 4-1: Product: syz
[ 1512.579859][ T4231] usb 4-1: Manufacturer: syz
[ 1512.610399][ T4231] usb 4-1: SerialNumber: syz
[ 1512.627761][T20972] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 1512.649587][ T4231] usb 4-1: config 0 descriptor??
[ 1512.736391][ T6404] loop2: detected capacity change from 0 to 4096
[ 1512.762686][ T4231] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[ 1512.817882][ T4231] radio-si470x: probe of 4-1:0.35 failed with error -5
[ 1512.864432][ T4490] usb 2-1: USB disconnect, device number 103
[ 1512.904406][ T4490] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 1513.007446][ T4231] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[ 1513.234789][ T4231] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71)
[ 1513.260934][ T4231] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[ 1513.343885][ T4231] usb 4-1: USB disconnect, device number 105
[ 1513.394271][ T4231] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[ 1513.805663][ T6494] sctp: [Deprecated]: syz.0.24044 (pid 6494) Use of int in max_burst socket option deprecated.
[ 1513.805663][ T6494] Use struct sctp_assoc_value instead
[ 1514.299126][ T6532] sctp: [Deprecated]: syz.5.24061 (pid 6532) Use of int in max_burst socket option deprecated.
[ 1514.299126][ T6532] Use struct sctp_assoc_value instead
[ 1514.630285][ T4231] usb 2-1: new full-speed USB device number 104 using dummy_hcd
[ 1514.766525][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24075'.
[ 1515.177384][ T4231] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[ 1515.207655][ T4231] usb 2-1: config 0 has no interface number 0
[ 1515.259883][ T4231] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1515.516815][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24093'.
[ 1515.549125][ T4231] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1515.550397][ T6626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24093'.
[ 1515.579391][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1515.615891][ T4231] usb 2-1: Product: syz
[ 1515.641843][ T4231] usb 2-1: Manufacturer: syz
[ 1515.668716][ T4231] usb 2-1: SerialNumber: syz
[ 1515.728309][ T4231] usb 2-1: config 0 descriptor??
[ 1515.838614][ T4231] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[ 1515.846263][ T4231] radio-si470x: probe of 2-1:0.35 failed with error -5
[ 1515.947395][ T6640] loop3: detected capacity change from 0 to 4096
[ 1516.072767][ T4231] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A)
[ 1516.328085][ T4231] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71)
[ 1516.360380][ T4231] radio-raremono 2-1:0.35: V4L2 device registered as radio48
[ 1516.441309][ T4231] usb 2-1: USB disconnect, device number 104
[ 1516.474548][ T4231] radio-raremono 2-1:0.35: Thanko's Raremono disconnected
[ 1516.700981][ T6633] loop5: detected capacity change from 0 to 32768
[ 1517.334954][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24118'.
[ 1517.354917][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24119'.
[ 1517.407293][ T6712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24118'.
[ 1517.533528][ T6723] loop2: detected capacity change from 0 to 512
[ 1517.673925][ T6738] loop5: detected capacity change from 0 to 64
[ 1517.719060][ T6723] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[ 1517.770571][ T6723] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1517.827559][ T6738] hfs: inconsistency in B*Tree (1,0,2,2,3)
[ 1517.858688][ T6723] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1517.888895][ T6723] EXT4-fs (loop2): Mount option "journal_async_commit" incompatible with ext3
[ 1518.318120][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24139'.
[ 1518.375560][ T4653] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1518.402173][ T4490] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1518.791549][ T4490] usb 4-1: Using ep0 maxpacket: 32
[ 1518.926617][ T4653] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[ 1518.934842][ T4653] usb 3-1: config 0 has no interface number 0
[ 1518.952959][ T4490] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1518.966784][ T4653] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10
[ 1518.981263][ T4490] usb 4-1: config 0 has no interface number 0
[ 1519.029141][ T4653] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024
[ 1519.234565][ T4490] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1519.259266][ T4490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1519.310861][ T4490] usb 4-1: Product: syz
[ 1519.315081][ T4490] usb 4-1: Manufacturer: syz
[ 1519.319707][ T4490] usb 4-1: SerialNumber: syz
[ 1519.342951][ T4653] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1519.352046][ T4653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1519.400916][ T4490] usb 4-1: config 0 descriptor??
[ 1519.406338][ T4653] usb 3-1: Product: syz
[ 1519.422203][ T4653] usb 3-1: Manufacturer: syz
[ 1519.453297][ T4653] usb 3-1: SerialNumber: syz
[ 1519.459650][ T4490] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1519.485663][ T4653] usb 3-1: config 0 descriptor??
[ 1519.514281][ T6723] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1519.522729][ T4490] usb 4-1: selecting invalid altsetting 1
[ 1519.541988][ T4490] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1519.553085][ T4653] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[ 1519.612800][ T4490] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1519.685037][ T4490] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1519.747594][ T4490] usb 4-1: media controller created
[ 1519.748761][ T6822] loop5: detected capacity change from 0 to 32768
[ 1519.790203][ T4653] usb 3-1: USB disconnect, device number 125
[ 1519.808740][ T4653] yurex 3-1:0.50: USB YUREX #0 now disconnected
[ 1519.820594][ T4490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1519.937509][ T6877] vivid-008: =================  START STATUS  =================
[ 1519.947038][ T6822] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.24149 (6822)
[ 1519.996388][ T6877] vivid-008: Generate PTS: true
[ 1520.029294][ T6877] vivid-008: Generate SCR: true
[ 1520.039922][ T6822] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[ 1520.056468][ T6877] tpg source WxH: 640x360 (Y'CbCr)
[ 1520.079430][ T6822] BTRFS info (device loop5): force clearing of disk cache
[ 1520.099706][ T6877] tpg field: 1
[ 1520.114346][ T6877] tpg crop: 640x360@0x0
[ 1520.123456][ T6822] BTRFS info (device loop5): force zlib compression, level 3
[ 1520.142478][ T6877] tpg compose: 640x360@0x0
[ 1520.162295][ T6877] tpg colorspace: 8
[ 1520.166478][ T6822] BTRFS info (device loop5): disabling free space tree
[ 1520.187518][ T6877] tpg transfer function: 0/0
[ 1520.198312][ T6822] BTRFS info (device loop5): max_inline at 0
[ 1520.206749][ T6877] tpg Y'CbCr encoding: 0/0
[ 1520.225035][ T6877] tpg quantization: 0/0
[ 1520.229417][ T6822] BTRFS info (device loop5): enabling free space tree
[ 1520.239408][ T4490] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1520.252820][ T6877] tpg RGB range: 0/2
[ 1520.256761][ T6877] vivid-008: ==================  END STATUS  ==================
[ 1520.264788][ T6822] BTRFS info (device loop5): using free space tree
[ 1520.304964][ T6822] BTRFS info (device loop5): has skinny extents
[ 1520.373028][ T4490] usb 4-1: USB disconnect, device number 106
[ 1520.796861][ T6822] BTRFS info (device loop5): enabling ssd optimizations
[ 1521.014999][ T6948] loop3: detected capacity change from 0 to 512
[ 1521.225341][ T6962] netlink: 'syz.0.24187': attribute type 1 has an invalid length.
[ 1521.257051][ T6948] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[ 1521.286367][ T6948] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1521.299412][ T6948] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1521.322727][ T6948] EXT4-fs (loop3): Mount option "journal_async_commit" incompatible with ext3
[ 1521.492798][ T6972] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.24191'.
[ 1521.741624][ T6980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1522.902807][T18262] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1523.341992][T18262] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 1523.363560][T18262] usb 4-1: config 0 has no interface number 0
[ 1523.369727][T18262] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10
[ 1523.456046][T18262] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024
[ 1523.617107][ T4653] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1523.795970][T18262] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1523.832937][T18262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.840963][T18262] usb 4-1: Product: syz
[ 1523.878875][T18262] usb 4-1: Manufacturer: syz
[ 1523.883532][T18262] usb 4-1: SerialNumber: syz
[ 1523.919951][T18262] usb 4-1: config 0 descriptor??
[ 1523.930946][ T4653] usb 3-1: Using ep0 maxpacket: 8
[ 1523.961460][ T6948] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1523.987874][T18262] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 1524.094352][ T4653] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1524.113621][ T4653] usb 3-1: config 179 has no interface number 0
[ 1524.141639][ T4653] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1524.185643][ T4653] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1524.224478][T18262] usb 4-1: USB disconnect, device number 107
[ 1524.236991][ T4653] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1524.244144][T18262] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 1524.292738][ T4653] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1524.346024][ T4653] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1524.388809][ T4653] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1524.427537][ T4653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1524.474861][ T7050] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1524.972094][ T4653] usb 3-1: USB disconnect, device number 126
[ 1525.003017][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1525.039597][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24235'.
[ 1525.584743][ T7157] tmpfs: Bad value for 'mpol'
[ 1526.037671][ T7199] netlink: 48 bytes leftover after parsing attributes in process `syz.3.24260'.
[ 1526.088758][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24260'.
[ 1526.097881][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24260'.
[ 1526.164807][ T7211] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.24265'.
[ 1526.195665][ T7199] netlink: 'syz.3.24260': attribute type 8 has an invalid length.
[ 1526.398389][ T4653] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1526.806275][ T7238] netlink: 56 bytes leftover after parsing attributes in process `syz.1.24273'.
[ 1526.923558][ T4653] usb 6-1: Using ep0 maxpacket: 8
[ 1526.968035][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24276'.
[ 1527.063451][ T7249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.24279'.
[ 1527.100485][ T4653] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1527.114974][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24279'.
[ 1527.124131][ T4653] usb 6-1: config 179 has no interface number 0
[ 1527.157663][ T4653] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1527.169242][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24279'.
[ 1527.198143][ T7249] netlink: 'syz.1.24279': attribute type 8 has an invalid length.
[ 1527.216077][ T4653] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1527.271215][ T4653] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1527.351044][ T4653] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1527.412585][ T4653] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1527.493260][ T4653] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1527.551267][ T4653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.607981][ T7198] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1527.790275][ T7288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.24301'.
[ 1527.968168][ T7290] loop2: detected capacity change from 0 to 4096
[ 1528.163356][ T4653] usb 6-1: USB disconnect, device number 66
[ 1528.174203][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1528.334486][ T7290] __ntfs_warning: 3 callbacks suppressed
[ 1528.334505][ T7290] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1528.439100][ T7290] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[ 1528.519321][ T7290] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1528.536304][ T7290] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1528.598082][ T7290] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1528.617722][ T7290] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[ 1528.678250][ T7290] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1528.744187][ T7290] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1528.846856][ T7290] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1528.855610][ T7290] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[ 1528.971198][ T7290] ntfs: volume version 3.1.
[ 1529.095043][ T7337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24306'.
[ 1529.346477][ T7359] device veth1_to_team entered promiscuous mode
[ 1529.419965][ T7354] device veth1_to_team left promiscuous mode
[ 1529.991994][ T7410] device veth1_to_team entered promiscuous mode
[ 1530.026785][ T7405] device veth1_to_team left promiscuous mode
[ 1530.508165][ T4650] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1530.527783][ T7458] device veth1_to_team entered promiscuous mode
[ 1530.571603][ T7456] device veth1_to_team left promiscuous mode
[ 1530.824779][ T4650] usb 2-1: Using ep0 maxpacket: 8
[ 1530.926384][ T7495] netlink: 'syz.0.24360': attribute type 1 has an invalid length.
[ 1531.056135][ T4650] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1531.197675][ T4650] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1531.459620][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24373'.
[ 1531.573534][ T4650] usb 2-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[ 1531.605846][ T4650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1531.614394][ T4650] usb 2-1: Product: syz
[ 1531.632834][ T4650] usb 2-1: Manufacturer: syz
[ 1531.666656][ T4650] usb 2-1: SerialNumber: syz
[ 1532.322850][ T4650] usb 2-1: USB disconnect, device number 105
[ 1532.469048][ T7612] loop5: detected capacity change from 0 to 1024
[ 1532.587719][ T7612] EXT4-fs (loop5): revision level too high, forcing read-only mode
[ 1532.606646][ T7612] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1532.692237][ T7625] loop3: detected capacity change from 0 to 4096
[ 1532.726723][ T7612] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.24399: bg 0: block 10: padding at end of block bitmap is not set
[ 1532.796361][ T7639] sctp: [Deprecated]: syz.0.24412 (pid 7639) Use of int in maxseg socket option.
[ 1532.796361][ T7639] Use struct sctp_assoc_value instead
[ 1532.819048][ T7612] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.24399: Failed to acquire dquot type 0
[ 1532.882282][ T7612] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.24399: Failed to acquire dquot type 0
[ 1532.958436][ T7644] netlink: 'syz.1.24405': attribute type 21 has an invalid length.
[ 1532.977767][ T7612] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.24399: Freeing blocks not in datazone - block = 0, count = 4096
[ 1532.993021][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24405'.
[ 1533.003787][ T7625] ntfs: volume version 3.1.
[ 1533.059320][ T7612] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.24399: Failed to acquire dquot type 0
[ 1533.131782][ T7612] EXT4-fs (loop5): 1 orphan inode deleted
[ 1533.162159][ T7612] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1533.216744][ T5367] udevd[5367]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1533.285175][ T7612] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.24399: iget: bad extended attribute block 6
[ 1533.813510][ T7700] loop5: detected capacity change from 0 to 4096
[ 1533.951635][ T7700] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1534.170790][ T7700] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback.
[ 1534.513242][ T7764] futex_wake_op: syz.1.24444 tries to shift op by 144; fix this program
[ 1534.521813][ T7764] futex_wake_op: syz.1.24444 tries to shift op by 144; fix this program
[ 1534.657139][ T7777] netlink: 'syz.0.24449': attribute type 21 has an invalid length.
[ 1534.692605][ T7777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24449'.
[ 1535.155765][T18262] usb 2-1: new full-speed USB device number 106 using dummy_hcd
[ 1535.430312][ T7835] loop5: detected capacity change from 0 to 8
[ 1535.497067][ T7835] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 1535.551196][ T7835] cramfs: unsupported filesystem features
[ 1535.787356][T18262] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[ 1535.810749][ T7800] loop2: detected capacity change from 0 to 32768
[ 1535.818110][T18262] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[ 1535.826229][T18262] usb 2-1: Product: syz
[ 1535.863183][T18262] usb 2-1: Manufacturer: syz
[ 1535.869714][ T7789] loop3: detected capacity change from 0 to 32768
[ 1535.887286][T18262] usb 2-1: SerialNumber: syz
[ 1535.916183][ T7800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.24457 (7800)
[ 1535.941743][T18262] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[ 1536.002083][ T7800] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 1536.041608][ T7800] BTRFS info (device loop2): using free space tree
[ 1536.060138][ T7789] XFS (loop3): Mounting V5 Filesystem
[ 1536.105688][ T7800] BTRFS info (device loop2): has skinny extents
[ 1536.229965][ T7789] XFS (loop3): Ending clean mount
[ 1536.386447][T18262] vp7045: USB control message 'in' went wrong.
[ 1536.392888][T18262] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1536.469496][ T4192] XFS (loop3): Unmounting Filesystem
[ 1536.496073][T18262] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[ 1536.593149][T18262] usb 2-1: USB disconnect, device number 106
[ 1536.599365][ T7800] BTRFS info (device loop2): enabling ssd optimizations
[ 1537.037051][ T5367] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5367)
[ 1537.850887][ T7960] loop5: detected capacity change from 0 to 4096
[ 1537.880461][ T7960] __ntfs_error: 34 callbacks suppressed
[ 1537.880486][ T7960] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[ 1537.987281][ T7960] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1538.108870][ T7960] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 1538.162732][ T7960] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1538.256174][ T7960] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1538.359665][ T7960] ntfs: volume version 3.1.
[ 1538.374039][ T7980] netlink: 'syz.0.24511': attribute type 1 has an invalid length.
[ 1538.427521][ T7960] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[ 1538.438505][ T7980] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.24511'.
[ 1538.455457][ T7960] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[ 1538.521864][ T7980] netlink: 'syz.0.24511': attribute type 1 has an invalid length.
[ 1538.617972][ T7960] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 1538.669877][ T7960] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1538.763782][ T7960] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[ 1538.867749][ T7989] netlink: 'syz.1.24504': attribute type 49 has an invalid length.
[ 1539.756711][ T8033] netlink: 'syz.1.24519': attribute type 1 has an invalid length.
[ 1539.778555][ T8038] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1539.842420][ T8033] netlink: 'syz.1.24519': attribute type 2 has an invalid length.
[ 1540.079056][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24527'.
[ 1541.932229][ T8187] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1542.455474][ T8238] loop3: detected capacity change from 0 to 512
[ 1542.754536][ T8238] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.24589: iget: bad i_size value: 38620345925642
[ 1542.853985][ T8238] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.24589: couldn't read orphan inode 15 (err -117)
[ 1542.938873][ T8238] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1543.473579][T18262] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1543.814699][T18262] usb 1-1: Using ep0 maxpacket: 16
[ 1543.887118][ T4650] usb 3-1: new full-speed USB device number 127 using dummy_hcd
[ 1543.966070][T18262] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1543.987127][T18262] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1544.126598][ T8302] loop5: detected capacity change from 0 to 32768
[ 1544.209757][T18262] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1544.230996][T18262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1544.239749][T18262] usb 1-1: Product: syz
[ 1544.305394][T18262] usb 1-1: Manufacturer: syz
[ 1544.331873][T18262] usb 1-1: SerialNumber: syz
[ 1544.551725][ T4650] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[ 1544.576057][ T4650] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[ 1544.612599][ T4650] usb 3-1: Product: syz
[ 1544.632068][ T4650] usb 3-1: Manufacturer: syz
[ 1544.654774][ T4650] usb 3-1: SerialNumber: syz
[ 1544.669102][ T4652] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1544.738568][ T4650] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[ 1544.744721][T18262] usb 1-1: 0:2 : does not exist
[ 1544.818509][T18262] usb 1-1: USB disconnect, device number 113
[ 1545.119478][ T4652] usb 6-1: config 0 has an invalid interface number: 199 but max is 1
[ 1545.147263][ T4519] udevd[4519]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1545.150231][ T4652] usb 6-1: config 0 has no interface number 1
[ 1545.192822][ T4652] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1545.205130][ T4650] vp7045: USB control message 'in' went wrong.
[ 1545.211372][ T4650] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1545.249313][ T4652] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1545.275536][ T4650] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[ 1545.349018][ T4650] usb 3-1: USB disconnect, device number 127
[ 1545.431081][ T4652] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[ 1545.456025][ T4652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1545.503660][ T4652] usb 6-1: SerialNumber: syz
[ 1545.540874][ T4652] usb 6-1: config 0 descriptor??
[ 1545.850180][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24632'.
[ 1545.873341][ T4652] usb 6-1: Found UVC 0.00 device <unnamed> (0002:0000)
[ 1545.896699][ T4652] usb 6-1: No valid video chain found.
[ 1545.952467][ T4652] usb 6-1: USB disconnect, device number 67
[ 1546.605583][ T8489] netlink: 100 bytes leftover after parsing attributes in process `syz.1.24649'.
[ 1546.637545][ T8492] CIFS mount error: No usable UNC path provided in device string!
[ 1546.637545][ T8492] 
[ 1546.696130][   T26] kauditd_printk_skb: 6 callbacks suppressed
[ 1546.696147][   T26] audit: type=1400 audit(1984.263:111): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=8495 comm="syz.2.24651"
[ 1546.715327][ T8492] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1546.760257][ T8507] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[ 1546.875402][ T8513] overlayfs: conflicting options: nfs_export=on,index=off
[ 1547.125387][ T8535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24662'.
[ 1547.370364][ T8551] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[ 1547.453870][ T8555] netlink: 84 bytes leftover after parsing attributes in process `syz.0.24670'.
[ 1547.479894][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24671'.
[ 1547.488695][ T8558] netlink: 'syz.2.24672': attribute type 1 has an invalid length.
[ 1547.534006][ T8557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1547.671072][ T8564] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[ 1547.760527][ T8570] x_tables: unsorted underflow at hook 4
[ 1547.886913][ T8575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24678'.
[ 1548.347576][ T4490] usb 1-1: new full-speed USB device number 114 using dummy_hcd
[ 1548.560828][ T8529] loop3: detected capacity change from 0 to 40427
[ 1548.603312][ T8617] x_tables: unsorted underflow at hook 4
[ 1548.691143][ T8529] F2FS-fs (loop3): invalid crc value
[ 1548.710249][ T4490] usb 1-1: not running at top speed; connect to a high speed hub
[ 1548.749803][ T8623] overlayfs: conflicting options: nfs_export=on,index=off
[ 1548.752949][ T4652] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1548.763342][ T8529] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1548.799139][ T4490] usb 1-1: config 88 has an invalid interface number: 11 but max is 0
[ 1548.829962][ T4490] usb 1-1: config 88 has no interface number 0
[ 1548.836277][ T4490] usb 1-1: config 88 interface 11 has no altsetting 0
[ 1548.965789][ T8529] attempt to access beyond end of device
[ 1548.965789][ T8529] loop3: rw=0, want=45072, limit=40427
[ 1549.010780][ T8529] F2FS-fs (loop3): Cannot turn on quotas: -5 on 1
[ 1549.104964][ T8529] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1549.122923][ T4490] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[ 1549.148586][ T4490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1549.210695][ T4490] usb 1-1: Product: syz
[ 1549.221463][ T4490] usb 1-1: Manufacturer: syz
[ 1549.243049][ T4490] usb 1-1: SerialNumber: syz
[ 1549.274249][ T8529] attempt to access beyond end of device
[ 1549.274249][ T8529] loop3: rw=0, want=45072, limit=40427
[ 1549.306743][ T4652] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1549.346419][ T4652] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1549.395849][ T4652] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.542040][ T4652] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1549.665149][ T4490] usb 1-1: USB disconnect, device number 114
[ 1550.688080][ T4490] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1550.762232][ T4652] stv0680 2-1:4.0: STV(e): camera ping failed!!
[ 1550.837504][T18262] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1550.983333][ T4652] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[ 1551.026639][ T4652] stv0680 2-1:4.0: last error: 0,  command = 0x0
[ 1551.072892][ T4652] usb 2-1: USB disconnect, device number 107
[ 1551.104904][ T4490] usb 3-1: config 0 has an invalid interface number: 199 but max is 1
[ 1551.124180][ T4490] usb 3-1: config 0 has no interface number 1
[ 1551.150887][ T4490] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1551.200874][ T4490] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1551.269492][T18262] usb 1-1: config 7 descriptor has 1 excess byte, ignoring
[ 1551.283956][T18262] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2
[ 1551.350765][ T4490] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[ 1551.388934][ T4490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1551.418712][ T4490] usb 3-1: SerialNumber: syz
[ 1551.441570][ T4490] usb 3-1: config 0 descriptor??
[ 1551.511218][T18262] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[ 1551.541003][T18262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.574600][ T8789] netlink: 1052 bytes leftover after parsing attributes in process `syz.5.24739'.
[ 1551.588890][T18262] usb 1-1: Product: syz
[ 1551.593103][T18262] usb 1-1: Manufacturer: syz
[ 1551.628999][T18262] usb 1-1: SerialNumber: syz
[ 1551.730097][T18262] rndis_wlan 1-1:7.0: skipping garbage
[ 1551.735805][T18262] usb 1-1: bad CDC descriptors
[ 1551.755297][T18262] rndis_host 1-1:7.0: skipping garbage
[ 1551.767623][ T4490] usb 3-1: Found UVC 0.00 device <unnamed> (0002:0000)
[ 1551.778135][ T4490] usb 3-1: No valid video chain found.
[ 1551.807108][T18262] usb 1-1: bad CDC descriptors
[ 1551.824487][ T4490] usb 3-1: USB disconnect, device number 2
[ 1551.852168][T18262] option 1-1:7.0: GSM modem (1-port) converter detected
[ 1551.919142][ T4650] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1551.970165][T18262] usb 1-1: USB disconnect, device number 115
[ 1552.024506][T18262] option 1-1:7.0: device disconnected
[ 1552.243522][ T4650] usb 4-1: Using ep0 maxpacket: 16
[ 1552.437076][ T4650] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1552.469491][ T4650] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1552.519717][ T4650] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[ 1552.562216][ T4650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.655411][ T4650] usb 4-1: config 0 descriptor??
[ 1552.727052][ T4650] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1552.942725][ T4652] usb 4-1: USB disconnect, device number 108
[ 1553.948547][ T4490] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1554.043882][T18262] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1554.367507][ T4490] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1554.391544][ T4490] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1554.440509][T18262] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1554.465203][T18262] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1554.590331][ T4490] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[ 1554.607945][ T4490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1554.637083][ T4490] usb 6-1: Product: syz
[ 1554.652849][ T4490] usb 6-1: Manufacturer: syz
[ 1554.670549][ T4490] usb 6-1: SerialNumber: syz
[ 1554.675991][T18262] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1554.695566][T18262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1554.735168][T18262] usb 1-1: Product: syz
[ 1554.748650][T18262] usb 1-1: Manufacturer: syz
[ 1554.770205][T18262] usb 1-1: SerialNumber: syz
[ 1554.836951][T18262] cdc_ncm 1-1:1.0: skipping garbage
[ 1554.844665][T18262] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[ 1554.870419][T18262] cdc_ncm 1-1:1.0: bind() failure
[ 1554.923493][T18262] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[ 1554.930334][T18262] cdc_ncm 1-1:1.1: bind() failure
[ 1555.124015][T18262] usb 1-1: USB disconnect, device number 116
[ 1555.269218][ T4490] usb 6-1: 0:1 : does not exist
[ 1555.309712][ T4490] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0
[ 1555.341068][ T4490] usb 6-1: unit 0 not found!
[ 1555.433384][ T4490] usb 6-1: USB disconnect, device number 68
[ 1555.485769][ T5368] udevd[5368]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1555.516445][ T9053] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1555.577155][T17995] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1555.969101][T17995] usb 4-1: Using ep0 maxpacket: 32
[ 1556.076433][ T9094] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1556.168758][T17995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1556.225421][T17995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1556.235305][T17995] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1556.311322][T17995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1556.337145][T17995] usb 4-1: config 0 descriptor??
[ 1556.397748][T17995] hub 4-1:0.0: USB hub found
[ 1556.539846][ T4650] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1556.631965][T17995] hub 4-1:0.0: 2 ports detected
[ 1556.873620][T17995] hub 4-1:0.0: hub_hub_status failed (err = -71)
[ 1556.881518][T17995] hub 4-1:0.0: config failed, can't get hub status (err -71)
[ 1556.995507][ T4650] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1557.016824][T17995] usbhid 4-1:0.0: can't add hid device: -71
[ 1557.021506][ T4650] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1557.022994][T17995] usbhid: probe of 4-1:0.0 failed with error -71
[ 1557.137892][T17995] usb 4-1: USB disconnect, device number 109
[ 1557.252207][ T4650] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1557.261302][ T4650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.327786][ T4650] usb 2-1: Product: syz
[ 1557.332031][ T4650] usb 2-1: Manufacturer: syz
[ 1557.391087][ T4650] usb 2-1: SerialNumber: syz
[ 1557.460576][ T4650] cdc_ncm 2-1:1.0: skipping garbage
[ 1557.476224][ T4650] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[ 1557.483677][ T4650] cdc_ncm 2-1:1.0: bind() failure
[ 1557.542205][ T4650] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1557.573412][ T4490] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 1557.585004][ T4650] cdc_ncm 2-1:1.1: bind() failure
[ 1557.709986][T17995] usb 2-1: USB disconnect, device number 108
[ 1558.043333][ T4490] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1558.070871][ T4490] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1558.231867][ T9199] netlink: 160 bytes leftover after parsing attributes in process `syz.5.24852'.
[ 1558.264623][ T9202] /dev/nullb0: Can't open blockdev
[ 1558.267755][ T4490] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[ 1558.292472][ T4490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.321055][ T4490] usb 1-1: Product: syz
[ 1558.336748][ T4490] usb 1-1: Manufacturer: syz
[ 1558.371232][ T4490] usb 1-1: SerialNumber: syz
[ 1558.509403][ T9213] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.24856'.
[ 1558.510984][ T4650] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1558.720862][ T9229] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.24858'.
[ 1558.876750][ T4650] usb 3-1: Using ep0 maxpacket: 32
[ 1558.957736][ T4490] usb 1-1: 0:1 : does not exist
[ 1558.985918][ T4490] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0
[ 1558.992260][ T9239] loop3: detected capacity change from 0 to 4096
[ 1559.006690][ T4490] usb 1-1: unit 0 not found!
[ 1559.044320][ T4650] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1559.076072][ T4490] usb 1-1: USB disconnect, device number 117
[ 1559.079828][ T4650] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1559.129953][ T4650] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1559.150793][ T4650] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1559.198962][ T4650] usb 3-1: config 0 descriptor??
[ 1559.219323][ T9263] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1559.266309][ T4650] hub 3-1:0.0: USB hub found
[ 1559.324000][ T9270] loop5: detected capacity change from 0 to 16
[ 1559.348014][ T5368] udevd[5368]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1559.417625][ T9270] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1559.508001][ T4650] hub 3-1:0.0: 2 ports detected
[ 1559.742892][ T4650] hub 3-1:0.0: hub_hub_status failed (err = -71)
[ 1559.749376][ T4650] hub 3-1:0.0: config failed, can't get hub status (err -71)
[ 1559.816543][ T9298] device gretap1 entered promiscuous mode
[ 1559.939405][T18264] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1559.956612][ T4650] usbhid 3-1:0.0: can't add hid device: -71
[ 1559.962614][ T4650] usbhid: probe of 3-1:0.0 failed with error -71
[ 1560.046273][ T4650] usb 3-1: USB disconnect, device number 3
[ 1560.197175][ T4653] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1560.469987][T18264] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1560.556754][ T4653] usb 6-1: Using ep0 maxpacket: 16
[ 1560.575476][T18264] usb 2-1: config 0 has an invalid interface number: 86 but max is 0
[ 1560.608577][T18264] usb 2-1: config 0 has no interface number 0
[ 1560.647272][T18264] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8
[ 1560.683528][T18264] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32
[ 1560.729235][T18264] usb 2-1: config 0 interface 86 has no altsetting 0
[ 1560.747892][ T4653] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1560.801015][ T4653] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1560.875470][ T4653] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[ 1560.907967][ T4653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1560.942554][T18264] usb 2-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e
[ 1560.958994][ T4653] usb 6-1: config 0 descriptor??
[ 1560.978307][T18264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1561.038504][ T4653] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1561.041108][T18264] usb 2-1: Product: syz
[ 1561.099075][T18264] usb 2-1: Manufacturer: syz
[ 1561.141923][T18264] usb 2-1: SerialNumber: syz
[ 1561.164459][T18264] usb 2-1: config 0 descriptor??
[ 1561.208608][ T9281] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1561.215691][ T9281] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1561.286383][ T4650] usb 6-1: USB disconnect, device number 69
[ 1561.412599][ T4653] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1561.547054][T18264] omninet 2-1:0.86: ZyXEL - omni.net usb converter detected
[ 1561.576797][T18264] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[ 1561.675936][T18264] usb 2-1: USB disconnect, device number 109
[ 1561.686854][ T9398] nvme nvme0: rdma connection establishment failed (-104)
[ 1561.720656][ T4653] usb 4-1: Using ep0 maxpacket: 16
[ 1561.728988][T18264] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[ 1561.769004][T18264] omninet 2-1:0.86: device disconnected
[ 1561.865818][ T4653] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 1561.886350][ T4653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.950825][ T4653] usb 4-1: config 0 has no interface number 0
[ 1562.232607][ T4653] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1562.276158][ T4653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.297588][ T4653] usb 4-1: Product: syz
[ 1562.302947][ T4653] usb 4-1: Manufacturer: syz
[ 1562.329564][ T4653] usb 4-1: SerialNumber: syz
[ 1562.342147][ T4653] usb 4-1: config 0 descriptor??
[ 1562.653967][  T150] block nbd1: Attempted send on invalid socket
[ 1562.660252][  T150] blk_update_request: I/O error, dev nbd1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1562.672159][ T4653] usb 4-1: Found UVC 0.00 device syz (046d:08d3)
[ 1562.678565][ T4653] usb 4-1: No valid video chain found.
[ 1562.684989][ T9472] VFS: unable to read V7 FS superblock on device nbd1.
[ 1562.747230][ T9472] VFS: could not find a valid V7 on nbd1.
[ 1562.931920][ T4653] usb 4-1: USB disconnect, device number 110
[ 1563.119363][T18264] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1563.366580][ T9515] netlink: 'syz.5.24937': attribute type 21 has an invalid length.
[ 1563.429089][ T9515] netlink: 128 bytes leftover after parsing attributes in process `syz.5.24937'.
[ 1563.464083][ T9515] netlink: 'syz.5.24937': attribute type 5 has an invalid length.
[ 1563.521067][ T9515] netlink: 'syz.5.24937': attribute type 6 has an invalid length.
[ 1563.549272][ T9515] netlink: 3 bytes leftover after parsing attributes in process `syz.5.24937'.
[ 1563.625934][T18264] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1563.730638][T18264] usb 3-1: config 0 has an invalid interface number: 86 but max is 0
[ 1563.738919][T18264] usb 3-1: config 0 has no interface number 0
[ 1563.770134][T18264] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8
[ 1563.805188][T18264] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32
[ 1563.807246][ T9539] loop3: detected capacity change from 0 to 1024
[ 1563.869502][T18264] usb 3-1: config 0 interface 86 has no altsetting 0
[ 1564.116803][T18264] usb 3-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e
[ 1564.168600][T18264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1564.169368][ T9539] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,norecovery,min_batch_time=0x0000000010000005,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,nolazytime,resgid=0x0000000000000000,noload,jqfmt=vfsold,barrier=0x0000000000000007,barrier=0x00,errors=continue. Quota mode: none.
[ 1564.206593][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1564.264765][T18264] usb 3-1: Product: syz
[ 1564.307670][T18264] usb 3-1: Manufacturer: syz
[ 1564.333295][T18264] usb 3-1: SerialNumber: syz
[ 1564.362422][ T9567] netlink: 'syz.0.24955': attribute type 21 has an invalid length.
[ 1564.384701][T18264] usb 3-1: config 0 descriptor??
[ 1564.422012][ T9567] netlink: 128 bytes leftover after parsing attributes in process `syz.0.24955'.
[ 1564.437227][ T9478] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1564.444332][ T9478] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1564.500105][ T9567] netlink: 'syz.0.24955': attribute type 5 has an invalid length.
[ 1564.542823][ T9567] netlink: 'syz.0.24955': attribute type 6 has an invalid length.
[ 1564.579586][ T9567] netlink: 3 bytes leftover after parsing attributes in process `syz.0.24955'.
[ 1564.864963][T18264] omninet 3-1:0.86: ZyXEL - omni.net usb converter detected
[ 1564.874430][T18264] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[ 1564.910123][T18264] usb 3-1: USB disconnect, device number 4
[ 1565.015549][T18264] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[ 1565.064080][T18264] omninet 3-1:0.86: device disconnected
[ 1565.289771][ T9636] device wireguard0 entered promiscuous mode
[ 1565.483676][ T4653] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1565.641065][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24978'.
[ 1565.816230][ T4653] usb 2-1: Using ep0 maxpacket: 16
[ 1566.034346][ T4653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1566.067032][ T4653] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1566.139486][ T4653] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[ 1566.178408][ T4653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1566.227687][ T4653] usb 2-1: config 0 descriptor??
[ 1566.268917][ T9695] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1566.288569][ T4653] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1566.361427][T17995] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 1566.517638][ T4653] usb 2-1: USB disconnect, device number 110
[ 1566.563242][ T4231] usb 6-1: new full-speed USB device number 70 using dummy_hcd
[ 1566.830825][T17995] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1566.881172][ T9736] mip6: mip6_destopt_init_state: spi is not 0: 1114112
[ 1566.920067][T17995] usb 1-1: config 0 has an invalid interface number: 86 but max is 0
[ 1566.942663][T17995] usb 1-1: config 0 has no interface number 0
[ 1566.980974][T17995] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8
[ 1567.028659][T17995] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32
[ 1567.076884][T17995] usb 1-1: config 0 interface 86 has no altsetting 0
[ 1567.090327][ T9749] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1567.167361][ T4231] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1567.237597][ T4231] usb 6-1: not running at top speed; connect to a high speed hub
[ 1567.279989][T17995] usb 1-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e
[ 1567.306388][T17995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.381977][T17995] usb 1-1: Product: syz
[ 1567.385775][ T4231] usb 6-1: config index 0 descriptor too short (expected 28771, got 10)
[ 1567.400630][T17995] usb 1-1: Manufacturer: syz
[ 1567.405390][ T4231] usb 6-1: config 114 has too many interfaces: 95, using maximum allowed: 32
[ 1567.425153][ T4231] usb 6-1: config 114 descriptor has 1 excess byte, ignoring
[ 1567.429335][T17995] usb 1-1: SerialNumber: syz
[ 1567.444653][ T4231] usb 6-1: config 114 has 0 interfaces, different from the descriptor's value: 95
[ 1567.476377][T17995] usb 1-1: config 0 descriptor??
[ 1567.509678][ T9675] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1567.528098][ T9675] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1567.528254][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25017'.
[ 1567.710792][ T4231] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f
[ 1567.735878][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.779084][ T4231] usb 6-1: Product: syz
[ 1567.817318][ T4231] usb 6-1: Manufacturer: syz
[ 1567.821988][ T4231] usb 6-1: SerialNumber: syz
[ 1567.910725][T17995] omninet 1-1:0.86: ZyXEL - omni.net usb converter detected
[ 1567.944245][T17995] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[ 1568.024839][T17995] usb 1-1: USB disconnect, device number 118
[ 1568.104499][T17995] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[ 1568.142453][T17995] omninet 1-1:0.86: device disconnected
[ 1568.165414][ T4231] usb 6-1: USB disconnect, device number 70
[ 1568.275115][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25031'.
[ 1568.558323][ T9849] xt_l2tp: v2 doesn't support IP mode
[ 1568.758639][ T9862] loop3: detected capacity change from 0 to 512
[ 1568.870254][ T9862] EXT4-fs (loop3): Ignoring removed oldalloc option
[ 1568.879800][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25046'.
[ 1568.923759][ T9874] blktrace: Concurrent blktraces are not allowed on sg0
[ 1569.084693][ T9862] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,dioread_lock,oldalloc,block_validity,,errors=continue. Quota mode: writeback.
[ 1569.238815][ T9895] xt_l2tp: v2 doesn't support IP mode
[ 1569.448244][ T4231] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1569.533559][ T9912] netlink: 5 bytes leftover after parsing attributes in process `syz.1.25068'.
[ 1569.600783][ T9912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1569.793789][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25060'.
[ 1569.857985][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25061'.
[ 1569.941808][ T4231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1569.973609][ T4231] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1570.039542][ T4231] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1570.350207][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1570.390505][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.444061][ T4231] usb 3-1: Product: syz
[ 1570.462658][ T4231] usb 3-1: Manufacturer: syz
[ 1570.486699][ T4231] usb 3-1: SerialNumber: syz
[ 1570.607672][ T4231] cdc_ncm 3-1:1.0: skipping garbage
[ 1570.620984][ T4231] usb 3-1: selecting invalid altsetting 1
[ 1570.720631][ T9983] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1570.951589][ T9993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1571.074073][ T4231] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[ 1571.084358][ T4231] cdc_ncm 3-1:1.0: bind() failure
[ 1571.191625][ T4231] usb 3-1: USB disconnect, device number 5
[ 1572.047895][ T9988] loop3: detected capacity change from 0 to 32768
[ 1572.134882][T10071] netlink: 'syz.5.25108': attribute type 1 has an invalid length.
[ 1572.207621][ T9988] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.25084 (9988)
[ 1572.207802][T10071] netlink: 244 bytes leftover after parsing attributes in process `syz.5.25108'.
[ 1572.390172][ T9988] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1572.399453][ T9988] BTRFS info (device loop3): using free space tree
[ 1572.456507][ T9988] BTRFS info (device loop3): has skinny extents
[ 1572.570308][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25116'.
[ 1572.608027][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25116'.
[ 1573.000808][ T9988] BTRFS info (device loop3): enabling ssd optimizations
[ 1573.323081][T10162] netlink: 'syz.2.25146': attribute type 49 has an invalid length.
[ 1573.457616][T10168] xt_hashlimit: overflow, rate too high: 0
[ 1573.653314][T10179] netlink: 'syz.5.25143': attribute type 21 has an invalid length.
[ 1573.688706][T10179] netlink: 100 bytes leftover after parsing attributes in process `syz.5.25143'.
[ 1573.998379][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1574.228761][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1574.317918][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1574.600364][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1574.640227][T17995] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1574.987687][T17995] usb 1-1: Using ep0 maxpacket: 8
[ 1575.119791][ T4271] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1575.159709][T17995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1575.372722][T17995] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[ 1575.392745][T17995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1575.457837][T17995] usb 1-1: Product: syz
[ 1575.468757][T17995] usb 1-1: Manufacturer: syz
[ 1575.473659][ T4271] usb 3-1: Using ep0 maxpacket: 8
[ 1575.500615][T17995] usb 1-1: SerialNumber: syz
[ 1575.541606][T17995] usb 1-1: config 0 descriptor??
[ 1575.621316][ T4271] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1575.630378][T17995] usb 1-1: bad CDC descriptors
[ 1575.636629][T17995] usb 1-1: unsupported MDLM descriptors
[ 1575.654391][ T4271] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1575.675419][T17995] cdc_acm 1-1:0.0: Zero length descriptor references
[ 1575.682887][T17995] cdc_acm: probe of 1-1:0.0 failed with error -22
[ 1575.714415][ T4271] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1575.813024][T10285] netlink: 'syz.3.25180': attribute type 21 has an invalid length.
[ 1575.820989][T10285] netlink: 128 bytes leftover after parsing attributes in process `syz.3.25180'.
[ 1575.895734][T17995] usb 1-1: USB disconnect, device number 119
[ 1575.933229][T10285] netlink: 'syz.3.25180': attribute type 4 has an invalid length.
[ 1575.958534][T10285] netlink: 'syz.3.25180': attribute type 3 has an invalid length.
[ 1576.001347][T10285] netlink: 3 bytes leftover after parsing attributes in process `syz.3.25180'.
[ 1576.016435][ T4271] usb 3-1: string descriptor 0 read error: -22
[ 1576.024997][ T4271] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1576.026807][T18264] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1576.070111][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1576.128003][T10302] loop3: detected capacity change from 0 to 64
[ 1576.155741][ T4271] usb 3-1: 0:2 : does not exist
[ 1576.180774][ T4271] usb-storage 3-1:1.1: USB Mass Storage device detected
[ 1576.397599][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25186'.
[ 1576.462998][T18264] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 1576.505511][T18264] usb 2-1: config 0 has no interface number 0
[ 1576.511656][T18264] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1576.571495][T10327] loop5: detected capacity change from 0 to 1024
[ 1576.591044][T18264] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1576.687529][ T4271] us122l: couldn't allocate write buffer
[ 1576.693518][ T4271] snd-usb-us122l: probe of 3-1:1.1 failed with error -22
[ 1576.752332][ T4271] usb 3-1: USB disconnect, device number 6
[ 1576.850448][T18264] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1576.890859][T18264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1576.899369][T18264] usb 2-1: Product: syz
[ 1576.911774][T18264] usb 2-1: Manufacturer: syz
[ 1576.916424][T18264] usb 2-1: SerialNumber: syz
[ 1576.966708][T18264] usb 2-1: config 0 descriptor??
[ 1577.026429][T18264] yurex 2-1:0.50: Could not submitting URB
[ 1577.060350][T18264] yurex: probe of 2-1:0.50 failed with error -5
[ 1577.110189][T10377] CIFS: VFS: Malformed UNC in devname
[ 1577.158957][ T5368] udevd[5368]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1577.371843][T18264] usb 2-1: USB disconnect, device number 111
[ 1577.436847][T10401] x_tables: unsorted underflow at hook 2
[ 1577.781586][T10417] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1577.985629][T10437] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead
[ 1578.066847][T10437] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[ 1578.385535][T10457] netlink: 'syz.5.25226': attribute type 3 has an invalid length.
[ 1578.408494][T10457] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.25226'.
[ 1578.476136][T10463] netlink: 'syz.3.25230': attribute type 1 has an invalid length.
[ 1578.544890][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25230'.
[ 1578.824354][T10489] SET target dimension over the limit!
[ 1579.282902][T10513] loop3: detected capacity change from 0 to 4096
[ 1579.397355][T10513] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[ 1579.653024][T10513] ntfs: volume version 3.1.
[ 1580.074570][T10574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25270'.
[ 1580.958918][T18264] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1581.402194][T18264] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[ 1581.410358][T18264] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1581.465955][T18264] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1581.533299][T10677] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1581.711202][T18264] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1581.754613][T18264] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1581.762880][T18264] usb 6-1: Product: syz
[ 1581.818770][T18264] usb 6-1: Manufacturer: syz
[ 1581.823465][T18264] usb 6-1: SerialNumber: syz
[ 1581.873531][T18264] usb 6-1: config 0 descriptor??
[ 1581.879457][T10694] loop3: detected capacity change from 0 to 1024
[ 1581.920940][T18264] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1581.936357][T18264] hub: probe of 6-1:0.0 failed with error -5
[ 1581.944916][T18264] usb 6-1: selecting invalid altsetting 0
[ 1581.961083][T10699] loop2: detected capacity change from 0 to 1764
[ 1582.123563][T10694] hfsplus: request for non-existent node 211 in B*Tree
[ 1582.153837][T10694] hfsplus: request for non-existent node 211 in B*Tree
[ 1582.169033][T18264] usb 6-1: USB disconnect, device number 71
[ 1582.441081][T10742] netlink: 'syz.1.25323': attribute type 5 has an invalid length.
[ 1582.749472][T10753] Cannot find del_set index 286 as target
[ 1582.984955][T10772] loop2: detected capacity change from 0 to 1024
[ 1583.761097][T10826] netlink: 'syz.5.25349': attribute type 1 has an invalid length.
[ 1583.807738][T10826] netlink: 224 bytes leftover after parsing attributes in process `syz.5.25349'.
[ 1583.993855][T10848] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[ 1584.056464][T10848] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[ 1584.328679][T10866] nvme_fabrics: missing parameter 'nqn=%s'
[ 1584.476621][T18264] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1584.649441][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25370'.
[ 1584.912789][T10909] netlink: 196 bytes leftover after parsing attributes in process `syz.3.25376'.
[ 1584.972808][T18264] usb 3-1: config 0 has an invalid interface number: 178 but max is 2
[ 1584.981062][T18264] usb 3-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config
[ 1585.052048][T18264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[ 1585.093832][T18264] usb 3-1: config 0 has no interface number 0
[ 1585.099978][T18264] usb 3-1: too many endpoints for config 0 interface 178 altsetting 200: 174, using maximum allowed: 30
[ 1585.170755][T18264] usb 3-1: config 0 interface 178 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 174
[ 1585.226698][T18264] usb 3-1: config 0 interface 178 has no altsetting 0
[ 1585.249581][T18264] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1585.293211][T18264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.320052][T18264] usb 3-1: config 0 descriptor??
[ 1585.670915][T18264] usb 3-1: string descriptor 0 read error: -71
[ 1585.744197][T18264] usb 3-1: USB disconnect, device number 7
[ 1585.821779][T10968] netlink: 52 bytes leftover after parsing attributes in process `syz.5.25395'.
[ 1585.897881][T10968] netlink: 80 bytes leftover after parsing attributes in process `syz.5.25395'.
[ 1585.926995][T10968] netlink: 80 bytes leftover after parsing attributes in process `syz.5.25395'.
[ 1585.999041][T10968] netlink: 24 bytes leftover after parsing attributes in process `syz.5.25395'.
[ 1586.250908][T10989] loop3: detected capacity change from 0 to 1024
[ 1586.276878][T10995] x_tables: duplicate underflow at hook 2
[ 1586.492402][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25408'.
[ 1586.898376][T11034] binfmt_misc: register: failed to install interpreter file ./file1
[ 1587.249711][T17995] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1587.332720][T11062] loop5: detected capacity change from 0 to 1024
[ 1587.524561][T17995] usb 1-1: Using ep0 maxpacket: 16
[ 1587.736311][T17995] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1587.853492][T17995] usb 1-1: config 25 has an invalid interface number: 91 but max is 0
[ 1587.877778][T17995] usb 1-1: config 25 has no interface number 0
[ 1587.907660][T17995] usb 1-1: config 25 interface 91 altsetting 7 bulk endpoint 0xE has invalid maxpacket 64
[ 1587.965367][T17995] usb 1-1: config 25 interface 91 altsetting 7 bulk endpoint 0xD has invalid maxpacket 16
[ 1588.032853][T17995] usb 1-1: config 25 interface 91 has no altsetting 0
[ 1588.244231][T17995] usb 1-1: New USB device found, idVendor=0421, idProduct=00ab, bcdDevice=ee.96
[ 1588.266809][T17995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.306153][T17995] usb 1-1: Product: syz
[ 1588.323249][T17995] usb 1-1: Manufacturer: syz
[ 1588.340722][T17995] usb 1-1: SerialNumber: syz
[ 1588.373315][T11041] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1588.386397][T11041] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1588.725077][T17995] usb 1-1: bad CDC descriptors
[ 1588.731686][T17995] usb 1-1: bad CDC descriptors
[ 1588.833156][T17995] usb 1-1: USB disconnect, device number 120
[ 1589.043502][T11176] x_tables: unsorted underflow at hook 3
[ 1589.303511][T11191] loop2: detected capacity change from 0 to 512
[ 1589.614626][T11191] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1589.963597][T11233] syz.3.25478: vmalloc error: size 70368744177852, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1590.048161][T11233] CPU: 0 PID: 11233 Comm: syz.3.25478 Not tainted syzkaller #0
[ 1590.055837][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1590.065948][T11233] Call Trace:
[ 1590.069246][T11233]  <TASK>
[ 1590.072196][T11233]  dump_stack_lvl+0x188/0x250
[ 1590.076906][T11233]  ? rcu_lock_release+0x5/0x20
[ 1590.081759][T11233]  ? show_regs_print_info+0x20/0x20
[ 1590.086998][T11233]  ? load_image+0x410/0x410
[ 1590.091542][T11233]  warn_alloc+0x245/0x320
[ 1590.095997][T11233]  ? zone_watermark_ok_safe+0x250/0x250
[ 1590.101584][T11233]  ? __mutex_lock_common+0x435/0x2400
[ 1590.107092][T11233]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[ 1590.112819][T11233]  __vmalloc_node_range+0x2b1/0x8b0
[ 1590.118059][T11233]  ? dvb_dvr_do_ioctl+0x12a/0x220
[ 1590.123110][T11233]  vmalloc+0x75/0x80
[ 1590.127028][T11233]  ? dvb_dvr_do_ioctl+0x12a/0x220
[ 1590.132076][T11233]  dvb_dvr_do_ioctl+0x12a/0x220
[ 1590.136967][T11233]  dvb_usercopy+0x191/0x2b0
[ 1590.141498][T11233]  ? dvb_dvr_release+0x3d0/0x3d0
[ 1590.146459][T11233]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1590.151446][T11233]  ? dvb_dvr_poll+0x230/0x230
[ 1590.156153][T11233]  dvb_dvr_ioctl+0x25/0x30
[ 1590.160599][T11233]  __se_sys_ioctl+0xfa/0x170
[ 1590.165232][T11233]  do_syscall_64+0x4c/0xa0
[ 1590.169669][T11233]  ? clear_bhb_loop+0x30/0x80
[ 1590.174370][T11233]  ? clear_bhb_loop+0x30/0x80
[ 1590.179075][T11233]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1590.185007][T11233] RIP: 0033:0x7fdff9d630d9
[ 1590.189452][T11233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1590.209082][T11233] RSP: 002b:00007fdff7fbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1590.217525][T11233] RAX: ffffffffffffffda RBX: 00007fdff9feafa0 RCX: 00007fdff9d630d9
[ 1590.225518][T11233] RDX: 00004000000000bc RSI: 0000000000006f2d RDI: 0000000000000003
[ 1590.233511][T11233] RBP: 00007fdff9dfa024 R08: 0000000000000000 R09: 0000000000000000
[ 1590.241588][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1590.249582][T11233] R13: 00007fdff9feb038 R14: 00007fdff9feafa0 R15: 00007ffe1a35ee38
[ 1590.257600][T11233]  </TASK>
[ 1590.488126][T17995] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 1590.532000][T11233] Mem-Info:
[ 1590.535222][T11233] active_anon:66 inactive_anon:19612 isolated_anon:0
[ 1590.535222][T11233]  active_file:4676 inactive_file:6018 isolated_file:0
[ 1590.535222][T11233]  unevictable:768 dirty:414 writeback:0
[ 1590.535222][T11233]  slab_reclaimable:17907 slab_unreclaimable:104153
[ 1590.535222][T11233]  mapped:35365 shmem:10857 pagetables:912 bounce:0
[ 1590.535222][T11233]  kernel_misc_reclaimable:0
[ 1590.535222][T11233]  free:1391675 free_pcp:4861 free_cma:0
[ 1590.706389][T11201] loop5: detected capacity change from 0 to 32768
[ 1590.820614][T17995] usb 1-1: Using ep0 maxpacket: 32
[ 1590.826447][T11257] loop2: detected capacity change from 0 to 4096
[ 1590.872701][T11201] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 scanned by syz.5.25464 (11201)
[ 1590.877991][T11257] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[ 1590.959783][T17995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1590.960007][T11201] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1590.992557][T17995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1591.055773][T11233] Node 0 active_anon:464kB inactive_anon:87404kB active_file:18704kB inactive_file:27836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145160kB dirty:1656kB writeback:0kB shmem:50748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12944kB pagetables:3648kB all_unreclaimable? no
[ 1591.066189][T17995] usb 1-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40
[ 1591.143690][T11201] BTRFS info (device loop5): using free space tree
[ 1591.150275][T11201] BTRFS info (device loop5): has skinny extents
[ 1591.175080][T11257] ntfs: volume version 3.1.
[ 1591.183730][T17995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1591.242936][T17995] usb 1-1: config 0 descriptor??
[ 1591.269604][T11233] Node 1 active_anon:0kB inactive_anon:544kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[ 1591.323056][T17995] hub 1-1:0.0: USB hub found
[ 1591.416109][T11233] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1591.536565][T11233] lowmem_reserve[]: 0 2539 2540 2540 2540
[ 1591.542404][T11233] Node 0 DMA32 free:1602676kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:884kB inactive_anon:92208kB active_file:18812kB inactive_file:32912kB unevictable:1536kB writepending:1680kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:12224kB local_pcp:10764kB free_cma:0kB
[ 1591.547450][T17995] hub 1-1:0.0: 1 port detected
[ 1591.577530][T11233] lowmem_reserve[]: 0 0 0 0 0
[ 1591.590046][T11233] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[ 1591.616802][T18264] usb 2-1: new full-speed USB device number 112 using dummy_hcd
[ 1591.654379][T11233] lowmem_reserve[]: 0 0 0 0 0
[ 1591.659158][T11233] Node 1 Normal free:3924972kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:544kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4896kB local_pcp:0kB free_cma:0kB
[ 1591.727740][T11290] overlayfs: missing 'lowerdir'
[ 1591.782646][T17995] hub 1-1:0.0: hub_hub_status failed (err = -71)
[ 1591.789352][T11233] lowmem_reserve[]: 0 0 0 0 0
[ 1591.794669][T17995] hub 1-1:0.0: config failed, can't get hub status (err -71)
[ 1591.802254][T11233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1591.889387][T11201] BTRFS info (device loop5): enabling ssd optimizations
[ 1591.901092][T11233] Node 0 DMA32: 15*4kB (E) 774*8kB (UME) 429*16kB (UME) 1460*32kB (UME) 761*64kB (UME) 284*128kB (UME) 173*256kB (UME) 100*512kB (UME) 60*1024kB (UME) 27*2048kB (UME) 302*4096kB (UM) = 1594108kB
[ 1591.952043][T17995] usb 1-1: USB disconnect, device number 121
[ 1592.041683][T11233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1592.112876][T11233] Node 1 Normal: 137*4kB (UME) 51*8kB (UME) 23*16kB (UME) 218*32kB (UME) 102*64kB (UE) 22*128kB (UME) 9*256kB (UE) 9*512kB (UE) 1*1024kB (E) 4*2048kB (ME) 950*4096kB (M) = 3924972kB
[ 1592.132348][T18264] usb 2-1: config 0 has an invalid interface number: 37 but max is 1
[ 1592.147220][T18264] usb 2-1: config 0 has an invalid interface number: 255 but max is 1
[ 1592.155461][T18264] usb 2-1: config 0 has no interface number 0
[ 1592.157873][T11233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1592.215761][T11233] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1592.226062][T18264] usb 2-1: config 0 has no interface number 1
[ 1592.272822][T18264] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1592.278726][T11233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1592.319950][T18264] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1592.370470][T11233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1592.373051][T11309] tmpfs: Bad value for 'mpol'
[ 1592.379915][T11233] 31131 total pagecache pages
[ 1592.379947][T11233] 116 pages in swap cache
[ 1592.379956][T11233] Swap cache stats: add 1229, delete 1113, find 193/481
[ 1592.398739][T18264] usb 2-1: config 0 interface 255 has no altsetting 0
[ 1592.445236][ T5367] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 9 /dev/loop5 scanned by udevd (5367)
[ 1592.448652][T11233] Free swap  = 123696kB
[ 1592.502070][T11233] Total swap = 124996kB
[ 1592.519672][T11233] 2097051 pages RAM
[ 1592.540635][T11233] 0 pages HighMem/MovableOnly
[ 1592.600552][T11233] 411499 pages reserved
[ 1592.604774][T11233] 0 pages cma reserved
[ 1592.638096][T18264] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[ 1592.686956][T18264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1592.726410][T18264] usb 2-1: Product: syz
[ 1592.762915][T18264] usb 2-1: Manufacturer: syz
[ 1592.776628][T18264] usb 2-1: SerialNumber: syz
[ 1592.810051][T18264] usb 2-1: config 0 descriptor??
[ 1592.869426][T11322] netlink: 'syz.0.25493': attribute type 21 has an invalid length.
[ 1592.910864][T11322] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1592.937171][T11322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1592.944522][T11322] IPv6: NLM_F_CREATE should be set when creating new route
[ 1592.951872][T11322] IPv6: NLM_F_CREATE should be set when creating new route
[ 1592.959161][T11322] IPv6: NLM_F_CREATE should be set when creating new route
[ 1593.135243][T18264] usb 2-1: USB disconnect, device number 112
[ 1594.217738][T11376] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1594.326792][T11376] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1594.335776][T11376] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1594.536414][T11376] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1594.601320][T11376] device geneve1 entered promiscuous mode
[ 1595.421224][T18264] usb 1-1: new full-speed USB device number 122 using dummy_hcd
[ 1595.476824][T11458] No such timeout policy "syz1"
[ 1595.736381][T11479] netlink: 'syz.2.25544': attribute type 11 has an invalid length.
[ 1595.863714][T18264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1595.906636][T18264] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1596.083138][T18264] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1596.103199][T18264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1596.163292][T18264] usb 1-1: SerialNumber: syz
[ 1596.243350][T18264] usb 1-1: 0:2 : does not exist
[ 1596.371730][T11535] xt_hashlimit: max too large, truncated to 1048576
[ 1596.383944][T11537] netlink: 'syz.5.25560': attribute type 3 has an invalid length.
[ 1596.560835][T11543] netlink: 56 bytes leftover after parsing attributes in process `syz.3.25561'.
[ 1596.577182][T18264] usb 1-1: USB disconnect, device number 122
[ 1596.713003][T11558] sctp: [Deprecated]: syz.2.25564 (pid 11558) Use of int in max_burst socket option.
[ 1596.713003][T11558] Use struct sctp_assoc_value instead
[ 1596.887263][T11571] netlink: 'syz.2.25568': attribute type 1 has an invalid length.
[ 1597.341712][T18264] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1597.382329][T11607] netlink: 48 bytes leftover after parsing attributes in process `syz.3.25581'.
[ 1597.503380][T11613] netlink: 'syz.0.25583': attribute type 13 has an invalid length.
[ 1597.649422][T11621] IPv6: Can't replace route, no match found
[ 1597.677700][T18264] usb 2-1: Using ep0 maxpacket: 32
[ 1597.862611][T18264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[ 1597.895322][T11634] x_tables: unsorted entry at hook 3
[ 1597.904119][T18264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[ 1598.210372][T18264] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[ 1598.239538][T18264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1598.314781][T18264] usb 2-1: Product: syz
[ 1598.318992][T18264] usb 2-1: Manufacturer: syz
[ 1598.323595][T18264] usb 2-1: SerialNumber: syz
[ 1598.379581][T18264] usb 2-1: config 0 descriptor??
[ 1598.453701][T11579] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1598.734564][T18264] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input96
[ 1598.953132][T18264] usb 2-1: USB disconnect, device number 113
[ 1599.242288][T11753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25626'.
[ 1599.513413][T11769] loop2: detected capacity change from 0 to 64
[ 1599.626679][T11769] Bad inode number on dev loop2: 6 is out of range
[ 1599.954423][T11799] loop5: detected capacity change from 0 to 1024
[ 1600.282421][ T4490] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1600.580831][ T4490] usb 4-1: Using ep0 maxpacket: 32
[ 1600.773755][ T4490] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[ 1600.782857][ T4490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1600.839521][ T4490] usb 4-1: config 0 descriptor??
[ 1600.917804][T11872] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component
[ 1600.946583][ T4490] gspca_main: sq930x-2.14.0 probing 041e:403c
[ 1601.324405][T11894] dlm: no local IP address has been set
[ 1601.366389][T11894] dlm: cannot start dlm midcomms -107
[ 1601.408120][ T4490] gspca_sq930x: ucbus_write failed -71
[ 1601.413867][ T4490] sq930x: probe of 4-1:0.0 failed with error -71
[ 1601.489974][ T4490] usb 4-1: USB disconnect, device number 111
[ 1602.025485][T17995] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 1602.350893][T11966] tc_dump_action: action bad kind
[ 1602.353528][T17995] usb 1-1: Using ep0 maxpacket: 8
[ 1602.527717][T17995] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1602.569995][T17995] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1602.622682][T17995] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1602.717271][T17995] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1602.739769][T17995] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00
[ 1602.790969][T17995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1602.830501][T17995] usb 1-1: config 0 descriptor??
[ 1602.836379][T11991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25707'.
[ 1602.887221][T11991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25707'.
[ 1602.922856][T17995] usbhid 1-1:0.0: can't add hid device: -22
[ 1602.928855][T17995] usbhid: probe of 1-1:0.0 failed with error -22
[ 1603.218266][T17995] usb 1-1: USB disconnect, device number 123
[ 1603.276303][T12010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready
[ 1603.299823][T11953] loop2: detected capacity change from 0 to 32768
[ 1603.409633][T11953] (syz.2.25694,11953,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1603.476975][T11953] (syz.2.25694,11953,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1603.717634][T11953] JBD2: Ignoring recovery information on journal
[ 1603.917132][T11953] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1604.133222][T10532] ocfs2: Finishing quota recovery on device (7,2) for slot 0
[ 1604.410344][T12086] netlink: 'syz.0.25737': attribute type 3 has an invalid length.
[ 1604.481277][T12086] netlink: 128 bytes leftover after parsing attributes in process `syz.0.25737'.
[ 1604.750893][T12108] netlink: 'syz.3.25744': attribute type 2 has an invalid length.
[ 1604.755769][ T4190] ocfs2: Unmounting device (7,2) on (node local)
[ 1604.758754][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25744'.
[ 1605.203103][T12137] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by ""[12137]
[ 1605.447247][ T4278] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1605.760600][ T4278] usb 2-1: Using ep0 maxpacket: 16
[ 1605.926668][ T4278] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1605.958713][ T4278] usb 2-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[ 1606.022310][ T4278] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1606.062736][ T4278] usb 2-1: config 1 has no interface number 1
[ 1606.087077][ T4278] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1606.170172][ T4278] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7
[ 1606.287555][T12212] loop2: detected capacity change from 0 to 64
[ 1606.366905][T12212] attempt to access beyond end of device
[ 1606.366905][T12212] loop2: rw=0, want=3586, limit=64
[ 1606.433535][T12212] Buffer I/O error on dev loop2, logical block 1792, async page read
[ 1606.461327][ T4278] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1606.475579][T12212] attempt to access beyond end of device
[ 1606.475579][T12212] loop2: rw=0, want=113154, limit=64
[ 1606.499605][ T4278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1606.551117][ T4278] usb 2-1: Product: syz
[ 1606.555366][ T4278] usb 2-1: Manufacturer: syz
[ 1606.567599][T12212] Buffer I/O error on dev loop2, logical block 56576, async page read
[ 1606.608365][ T4278] usb 2-1: SerialNumber: syz
[ 1607.016711][ T4278] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1607.049333][ T4278] usb 2-1: found format II with max.bitrate = 0, frame size=0
[ 1607.056863][ T4278] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1607.205942][ T4278] usb 2-1: USB disconnect, device number 114
[ 1607.521775][ T5367] udevd[5367]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1607.925710][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25818'.
[ 1608.149789][T12360] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1608.626831][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25834'.
[ 1608.715790][T12397] netlink: 56 bytes leftover after parsing attributes in process `syz.2.25836'.
[ 1609.026641][ T4490] usb 4-1: new full-speed USB device number 112 using dummy_hcd
[ 1609.101344][T17995] usb 1-1: new full-speed USB device number 124 using dummy_hcd
[ 1609.433122][ T4490] usb 4-1: config index 0 descriptor too short (expected 2075, got 27)
[ 1609.444091][ T4490] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[ 1609.452318][ T4490] usb 4-1: config 0 has no interface number 0
[ 1609.471332][T12438] x_tables: unsorted underflow at hook 2
[ 1609.496988][T17995] usb 1-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1609.529728][ T4490] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12408, setting to 64
[ 1609.592978][ T4490] usb 4-1: config 0 interface 200 has no altsetting 0
[ 1609.655086][T17995] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1609.698225][T17995] usb 1-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0
[ 1609.719512][T17995] usb 1-1: Product: syz
[ 1609.764342][T12406] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1609.790331][T17995] usbhid 1-1:15.0: fixing wrong optional hid class descriptors count
[ 1609.821368][T17995] usbhid 1-1:15.0: can't add hid device: -22
[ 1609.832499][ T4490] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[ 1609.852524][ T4490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1609.861036][T17995] usbhid: probe of 1-1:15.0 failed with error -22
[ 1609.889234][ T4490] usb 4-1: Product: syz
[ 1609.910844][ T4490] usb 4-1: Manufacturer: syz
[ 1609.932375][ T4490] usb 4-1: SerialNumber: syz
[ 1609.950020][ T4490] usb 4-1: config 0 descriptor??
[ 1610.073492][T17995] usb 1-1: USB disconnect, device number 124
[ 1610.320754][ T4490] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input98
[ 1610.385414][ T4490] usb 4-1: USB disconnect, device number 112
[ 1610.470588][T12518] loop2: detected capacity change from 0 to 64
[ 1610.523918][T12517] device gtp1 entered promiscuous mode
[ 1610.655114][T12530] IPv6: Can't replace route, no match found
[ 1610.852523][T12542] loop3: detected capacity change from 0 to 764
[ 1610.902507][ T4190] hfs: node 4:3 still has 1 user(s)!
[ 1611.060485][T12555] loop5: detected capacity change from 0 to 256
[ 1611.258818][T12571] netlink: 104 bytes leftover after parsing attributes in process `syz.1.25885'.
[ 1611.527559][T12591] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1611.574195][T12591] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1611.613613][T12591] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1611.645672][T12591] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[ 1611.709761][T12591] comedi comedi3: 8255: I/O port conflict (0x8,4)
[ 1611.733695][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25897'.
[ 1611.742874][T12591] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1611.760056][T12591] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1611.821537][T12591] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1611.886887][T12601] loop3: detected capacity change from 0 to 4096
[ 1611.893855][T12591] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1611.900370][T12591] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1611.967725][T12601] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[ 1611.993144][T12591] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1612.020976][T12620] netlink: 'syz.1.25902': attribute type 3 has an invalid length.
[ 1612.039375][T12591] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1612.063825][T12620] netlink: 'syz.1.25902': attribute type 1 has an invalid length.
[ 1612.137225][T12601] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1612.144075][T12624] netlink: 124 bytes leftover after parsing attributes in process `syz.0.25903'.
[ 1612.158708][T12620] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.25902'.
[ 1612.165651][T12625] 9pnet_rdma: rdma_create_trans (12625): problem binding to privport: 13
[ 1612.223732][T12601] ntfs3: loop3: Inode r=b is not in use!
[ 1612.229539][T12601] ntfs3: loop3: Failed to load $Extend.
[ 1612.995833][ T4278] usb 6-1: new full-speed USB device number 72 using dummy_hcd
[ 1613.076752][T12683] loop2: detected capacity change from 0 to 2048
[ 1613.178876][T12689] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1613.267070][T12693] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1613.452777][ T4278] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1613.460975][ T4278] usb 6-1: config 0 has no interface number 0
[ 1613.494065][ T4278] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1613.533239][ T4278] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1613.559391][ T4278] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[ 1613.591871][ T4278] usb 6-1: config 0 interface 2 has no altsetting 0
[ 1613.801469][T18190] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1613.809409][ T4278] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[ 1613.826492][ T4278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1613.845533][ T4278] usb 6-1: Product: syz
[ 1613.867041][ T4278] usb 6-1: Manufacturer: syz
[ 1613.871940][ T4278] usb 6-1: SerialNumber: syz
[ 1613.892715][ T4278] usb 6-1: config 0 descriptor??
[ 1613.912569][T12650] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1613.919673][T12650] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1614.042703][ T4490] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 1614.104657][T18190] usb 2-1: Using ep0 maxpacket: 16
[ 1614.235866][ T4653] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[ 1614.257861][T18190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256
[ 1614.332264][ T4490] usb 1-1: Using ep0 maxpacket: 16
[ 1614.442688][ T4278] usb 6-1: USB disconnect, device number 72
[ 1614.457580][ T4490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1614.499973][ T4490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1614.511765][T18190] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1614.520696][ T4490] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[ 1614.542808][ T4490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1614.553207][T18190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1614.562038][ T4490] usb 1-1: config 0 descriptor??
[ 1614.574821][T18190] usb 2-1: Product: syz
[ 1614.579024][T18190] usb 2-1: Manufacturer: syz
[ 1614.583628][T18190] usb 2-1: SerialNumber: syz
[ 1614.635580][T18190] usb 2-1: config 0 descriptor??
[ 1614.671503][T12699] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1614.707260][T18190] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected
[ 1614.735682][ T4653] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[ 1614.767232][ T4653] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[ 1614.780010][T12735] loop3: detected capacity change from 0 to 32768
[ 1614.828848][ T4653] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1614.857296][ T4653] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00
[ 1614.884848][ T4653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1614.915837][ T4653] usb 3-1: config 0 descriptor??
[ 1614.965514][T18264] usb 2-1: USB disconnect, device number 115
[ 1614.970438][    C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71)
[ 1614.977760][    C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71)
[ 1614.983538][T18264] mcba_usb 2-1:0.0 can0: device disconnected
[ 1615.008700][T12735] XFS (loop3): Mounting V5 Filesystem
[ 1615.090380][ T4490] apple 0003:05AC:024B.0002: unknown global tag 0xe
[ 1615.107917][ T4490] apple 0003:05AC:024B.0002: item 0 1 1 14 parsing failed
[ 1615.119046][ T4490] apple 0003:05AC:024B.0002: parse failed
[ 1615.136772][ T4490] apple: probe of 0003:05AC:024B.0002 failed with error -22
[ 1615.312463][T18264] usb 1-1: USB disconnect, device number 125
[ 1615.348960][T12803] loop5: detected capacity change from 0 to 512
[ 1615.352238][T12735] XFS (loop3): Ending clean mount
[ 1615.417818][T12803] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1615.437340][ T4653] hid (null): nested delimiters
[ 1615.454523][ T4653] logitech-hidpp-device 0003:046D:C343.0003: collection stack underflow
[ 1615.486200][ T4653] logitech-hidpp-device 0003:046D:C343.0003: item 0 2 0 12 parsing failed
[ 1615.501160][T12803] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.25939: invalid indirect mapped block 4294967295 (level 1)
[ 1615.508079][ T4653] logitech-hidpp-device 0003:046D:C343.0003: hidpp_probe:parse failed
[ 1615.555974][ T4653] logitech-hidpp-device: probe of 0003:046D:C343.0003 failed with error -22
[ 1615.612210][ T4192] XFS (loop3): Unmounting Filesystem
[ 1615.665428][T12803] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.25939: invalid indirect mapped block 4294967295 (level 1)
[ 1615.721489][T12803] EXT4-fs (loop5): 2 truncates cleaned up
[ 1615.738312][T12803] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,test_dummy_encryption=v1,discard,errors=continue,grpid,,errors=continue. Quota mode: writeback.
[ 1615.797564][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25942'.
[ 1615.814532][ T4653] usb 3-1: USB disconnect, device number 8
[ 1615.935282][T12803] EXT4-fs error (device loop5): ext4_get_parent:1906: inode #11: comm syz.5.25939: bad parent inode number: 3
[ 1616.468207][T18190] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1617.305157][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25963'.
[ 1617.579457][T18190] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1617.791975][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25972'.
[ 1618.045570][T12954] loop2: detected capacity change from 0 to 2048
[ 1618.221594][ T5367]  loop2: p3 < >
[ 1618.244178][T12954]  loop2: p3 < >
[ 1618.419828][ T5367] udevd[5367]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[ 1618.482398][T12985] loop5: detected capacity change from 0 to 64
[ 1618.562541][T12984] loop3: detected capacity change from 0 to 4096
[ 1618.596410][T12993] loop2: detected capacity change from 0 to 64
[ 1618.652107][T12984] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1618.662476][T12984] EXT4-fs (loop3): Ignoring removed orlov option
[ 1618.753815][T12984] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1618.843651][T12993] attempt to access beyond end of device
[ 1618.843651][T12993] loop2: rw=0, want=1026, limit=64
[ 1618.913377][ T5368] udevd[5368]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[ 1618.926266][T12993] Buffer I/O error on dev loop2, logical block 512, async page read
[ 1618.990389][T12993] attempt to access beyond end of device
[ 1618.990389][T12993] loop2: rw=0, want=113154, limit=64
[ 1619.030244][T12993] Buffer I/O error on dev loop2, logical block 56576, async page read
[ 1619.041903][T13006] loop5: detected capacity change from 0 to 1024
[ 1619.102676][T13004] attempt to access beyond end of device
[ 1619.102676][T13004] loop2: rw=0, want=1026, limit=64
[ 1619.128875][T13004] Buffer I/O error on dev loop2, logical block 512, async page read
[ 1619.177818][T13004] attempt to access beyond end of device
[ 1619.177818][T13004] loop2: rw=0, want=113154, limit=64
[ 1619.244155][T13006] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1619.321833][T13004] Buffer I/O error on dev loop2, logical block 56576, async page read
[ 1619.352232][T13032] netlink: 72 bytes leftover after parsing attributes in process `syz.0.25995'.
[ 1619.400228][T13006] fscrypt (loop5, inode 14): Error -61 getting encryption context
[ 1619.811661][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1619.858919][T13047] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1620.218956][T13061] loop2: detected capacity change from 0 to 4096
[ 1620.275861][T13061] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nodioread_nolock,,errors=continue. Quota mode: writeback.
[ 1620.399563][T13045] netlink: 44 bytes leftover after parsing attributes in process `syz.5.25998'.
[ 1620.423294][T13045] netlink: 43 bytes leftover after parsing attributes in process `syz.5.25998'.
[ 1620.491386][T13045] netlink: 'syz.5.25998': attribute type 6 has an invalid length.
[ 1620.572243][T13045] netlink: 'syz.5.25998': attribute type 5 has an invalid length.
[ 1620.580106][T13045] netlink: 43 bytes leftover after parsing attributes in process `syz.5.25998'.
[ 1620.868153][T18264] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1620.887217][T13091] loop3: detected capacity change from 0 to 512
[ 1621.052679][T13091] EXT4-fs (loop3): Ignoring removed nobh option
[ 1621.060475][T13091] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1621.139218][T13091] EXT4-fs (loop3): 1 truncate cleaned up
[ 1621.144938][T13091] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,nobh,acl,,errors=continue. Quota mode: none.
[ 1621.299500][T18264] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1621.331260][T18264] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1621.371625][T18264] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1621.443343][T18264] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 1621.474250][T18264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1621.534543][T13133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1621.624910][T13143] loop5: detected capacity change from 0 to 512
[ 1621.876730][T18264] cxacru 2-1:1.0: receive of cm 0x90 failed (-71)
[ 1621.919601][T18264] usb 2-1: USB disconnect, device number 116
[ 1621.927946][T13150] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[ 1621.963800][T13143] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.26029: inode has both inline data and extents flags
[ 1621.988123][T13150] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[ 1622.013171][T13143] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.26029: couldn't read orphan inode 15 (err -117)
[ 1622.036512][T13143] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000e3f,nodiscard,,errors=continue. Quota mode: none.
[ 1622.828233][T18190] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1622.957650][T13197] netlink: 220 bytes leftover after parsing attributes in process `syz.1.26044'.
[ 1623.017142][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26044'.
[ 1623.127590][T18190] usb 4-1: Using ep0 maxpacket: 16
[ 1623.345731][T18190] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1623.470554][T17995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1623.547850][T18190] usb 4-1: config 131 has an invalid interface number: 10 but max is 1
[ 1623.559409][T17995] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1623.571850][T18190] usb 4-1: config 131 has an invalid interface number: 3 but max is 1
[ 1623.608247][T18190] usb 4-1: config 131 has no interface number 0
[ 1623.647231][T18190] usb 4-1: config 131 has no interface number 1
[ 1623.693638][T18190] usb 4-1: config 131 interface 10 has no altsetting 0
[ 1623.742709][T18190] usb 4-1: config 131 interface 3 has no altsetting 0
[ 1623.772200][T13229] fido_id[13229]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1624.000390][T18190] usb 4-1: New USB device found, idVendor=1199, idProduct=907b, bcdDevice=b2.3c
[ 1624.021419][T18190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.071075][T18190] usb 4-1: Product: syz
[ 1624.107731][T18190] usb 4-1: Manufacturer: syz
[ 1624.133640][T18190] usb 4-1: SerialNumber: syz
[ 1624.571774][T18190] usb 4-1: selecting invalid altsetting 0
[ 1624.577556][T18190] usb 4-1: Could not set interface, error -22
[ 1624.620117][T18190] usb 4-1: USB disconnect, device number 113
[ 1625.047654][T13316] loop5: detected capacity change from 0 to 256
[ 1625.431072][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1625.520265][T13285] loop2: detected capacity change from 0 to 32768
[ 1625.584079][T13285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.26070 (13285)
[ 1625.688888][T13285] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1625.757517][T13285] BTRFS info (device loop2): setting nodatasum
[ 1625.763748][T13285] BTRFS info (device loop2): force zlib compression, level 3
[ 1625.849370][T13285] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1625.906420][T13285] BTRFS info (device loop2): use lzo compression, level 0
[ 1625.945862][T13285] BTRFS info (device loop2): turning on flush-on-commit
[ 1625.974520][T13285] BTRFS info (device loop2): enabling auto defrag
[ 1625.981094][T13285] BTRFS info (device loop2): max_inline at 4096
[ 1626.067342][T13285] BTRFS info (device loop2): using free space tree
[ 1626.131334][T13285] BTRFS info (device loop2): has skinny extents
[ 1626.435885][T13390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.26098'.
[ 1626.516555][T13285] BTRFS info (device loop2): enabling ssd optimizations
[ 1626.525476][T13390] netlink: 48 bytes leftover after parsing attributes in process `syz.5.26098'.
[ 1626.667568][T13390] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[ 1627.254736][ T4278] Bluetooth: hci4: command 0x0405 tx timeout
[ 1627.696223][T13450] loop5: detected capacity change from 0 to 1024
[ 1628.263435][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1628.335913][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1628.394781][  T144] hfsplus: b-tree write err: -5, ino 25
[ 1628.404601][  T144] hfsplus: b-tree write err: -5, ino 4
[ 1628.432115][  T144] hfsplus: b-tree write err: -5, ino 2
[ 1628.457927][  T144] hfsplus: b-tree write err: -5, ino 26
[ 1628.751626][T13484] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 1628.763385][T13484] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 1628.771807][T13484] CPU: 0 PID: 13484 Comm: syz.5.26125 Not tainted syzkaller #0
[ 1628.779358][T13484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1628.789429][T13484] RIP: 0010:hidpp_raw_hidpp_event+0x23d9/0x3420
[ 1628.795768][T13484] Code: 8d 5c 24 02 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 4d 89 ee 0f 85 1b 0f 00 00 44 0f b6 2b 49 8d 5f 02 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 19 0f 00 00 0f b6 03 0f b6 d8 44 89 ef
[ 1628.815384][T13484] RSP: 0018:ffffc9000394f9c0 EFLAGS: 00010246
[ 1628.821474][T13484] RAX: 0000000000000000 RBX: 0000000000000002 RCX: dffffc0000000000
[ 1628.829455][T13484] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888025287838
[ 1628.837429][T13484] RBP: ffffc9000394fb00 R08: ffff88802528783f R09: 1ffff11004a50f07
[ 1628.845406][T13484] R10: dffffc0000000000 R11: ffffed1004a50f08 R12: ffff88805f8980b6
[ 1628.853381][T13484] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[ 1628.861354][T13484] FS:  00007fa450ab96c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 1628.870289][T13484] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1628.876883][T13484] CR2: 0000001b32a22ff8 CR3: 0000000056b75000 CR4: 00000000003506f0
[ 1628.884871][T13484] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1628.892843][T13484] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1628.900823][T13484] Call Trace:
[ 1628.904103][T13484]  <TASK>
[ 1628.907039][T13484]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1628.913125][T13484]  ? lock_chain_count+0x20/0x20
[ 1628.917990][T13484]  ? hidpp_ff_range_store+0x190/0x190
[ 1628.923371][T13484]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1628.929282][T13484]  ? lockdep_hardirqs_on+0x94/0x140
[ 1628.934500][T13484]  hidpp_raw_event+0x155/0x1740
[ 1628.939380][T13484]  ? __might_fault+0xb7/0x110
[ 1628.944163][T13484]  hid_input_report+0x3fe/0x4f0
[ 1628.949026][T13484]  ? hidpp_remove+0x90/0x90
[ 1628.953542][T13484]  uhid_dev_input2+0xb1/0x130
[ 1628.958234][T13484]  uhid_char_write+0x376/0xaf0
[ 1628.963006][T13484]  ? uhid_char_read+0x870/0x870
[ 1628.967876][T13484]  vfs_write+0x304/0xd70
[ 1628.972128][T13484]  ? file_end_write+0x250/0x250
[ 1628.976987][T13484]  ? __fget_files+0x402/0x470
[ 1628.981686][T13484]  ? __fdget_pos+0x1e2/0x370
[ 1628.986287][T13484]  ? ksys_write+0x70/0x260
[ 1628.990720][T13484]  ksys_write+0x153/0x260
[ 1628.995064][T13484]  ? __ia32_sys_read+0x80/0x80
[ 1628.999835][T13484]  ? lockdep_hardirqs_on+0x94/0x140
[ 1629.005045][T13484]  do_syscall_64+0x4c/0xa0
[ 1629.009465][T13484]  ? clear_bhb_loop+0x30/0x80
[ 1629.014151][T13484]  ? clear_bhb_loop+0x30/0x80
[ 1629.018832][T13484]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1629.024735][T13484] RIP: 0033:0x7fa4528610d9
[ 1629.029156][T13484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1629.048777][T13484] RSP: 002b:00007fa450ab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1629.057207][T13484] RAX: ffffffffffffffda RBX: 00007fa452ae8fa0 RCX: 00007fa4528610d9
[ 1629.065188][T13484] RDX: 000000000000001a RSI: 0000200000000300 RDI: 0000000000000003
[ 1629.073162][T13484] RBP: 00007fa4528f8024 R08: 0000000000000000 R09: 0000000000000000
[ 1629.081140][T13484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1629.089118][T13484] R13: 00007fa452ae9038 R14: 00007fa452ae8fa0 R15: 00007ffd4afed048
[ 1629.097116][T13484]  </TASK>
[ 1629.100588][T13484] Modules linked in:
[ 1629.105271][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1629.119450][ T4233] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 1629.274450][T13484] ---[ end trace 868141a4f4f3cb79 ]---
[ 1629.280084][T13484] RIP: 0010:hidpp_raw_hidpp_event+0x23d9/0x3420
[ 1629.297709][T13484] Code: 8d 5c 24 02 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 4d 89 ee 0f 85 1b 0f 00 00 44 0f b6 2b 49 8d 5f 02 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 19 0f 00 00 0f b6 03 0f b6 d8 44 89 ef
[ 1629.392037][ T4233] usb 1-1: Using ep0 maxpacket: 8
[ 1629.479776][T13484] RSP: 0018:ffffc9000394f9c0 EFLAGS: 00010246
[ 1629.487134][T13484] RAX: 0000000000000000 RBX: 0000000000000002 RCX: dffffc0000000000
[ 1629.507432][T13484] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888025287838
[ 1629.522559][ T4233] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1629.526536][T13484] RBP: ffffc9000394fb00 R08: ffff88802528783f R09: 1ffff11004a50f07
[ 1629.539993][ T4233] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1629.558201][T13484] R10: dffffc0000000000 R11: ffffed1004a50f08 R12: ffff88805f8980b6
[ 1629.562030][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1629.589713][T13484] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[ 1629.596470][ T4233] usb 1-1: config 0 descriptor??
[ 1629.615242][T13484] FS:  00007fa450ab96c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[ 1629.643391][T13484] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1629.664517][T13484] CR2: 00007ff06f4ff2f8 CR3: 0000000056b75000 CR4: 00000000003506e0
[ 1629.690608][T13484] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1629.716535][T13484] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1629.744527][T13484] Kernel panic - not syncing: Fatal exception
[ 1629.750834][T13484] Kernel Offset: disabled
[ 1629.755161][T13484] Rebooting in 86400 seconds..