last executing test programs:

1m40.200657169s ago: executing program 1 (id=2521):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000072001f052abd7000fcdbff2507"], 0x48}}, 0x0)

1m40.14927275s ago: executing program 1 (id=2522):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0xc, 0xfe, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x2, 0xe9, "80b5ce6e147f5835c6c508ed8f8757cea9a97a90c3a6a2ef1e680b82bb868d50e78257903f91871ef3a8b3016c81365ac5ca27965b899342f87588e0ac99748dad3650e70b810c151670bac2d42ad9333a3c0ee1a8bef51c547f9b2153e2e3a7089084a8b55a5beef3da87308f1732d6369c9053c8009d4efa1d3e47499b11aeb171c49305c932e04b29e6285c6fba5b084679f8f43ea287d981c57bc9e92304e0b766b5e83e6297da3b857f42a78a48998cd203226f124fa2e9464efa1331ccbd0229251d91f20ef2d1533d507b40a13851b0d1626e32856edfe4b9919046a0722dcdce392b8e4ebb"}, @generic={0xc0, 0x6ff, "686c010b2062ba17d17a3ebc029d86e6e775f7983e71390e58f4df0f336e5ffb95beecf7ff144dd8fd267b04f19597402fbeb22ea5d9985c7544b43ef6de18ee0d70f968740d0f44bcc7bf40a8b3f5f0e7b61d311019f183300a854b449027c1552368b609a4962037a6b54cb6d9ca43a80e617be693277d23664cb19c5f355f7409bfc9a186811e8bcd25db9e8592d4c920eff984e343be4f47208d3fe9627a43d035407903b9d453d828e374444f7db4dd7d6124afb5af7378f21eaa7f01f82aca8b6cefb1a17d669aef633d083f7050f990bdba1bf14d6cd79d1c32d03820792ad0f50aea184241d6d0d489a2dc9ba1ce404004f026d9edfb05b98f1225fe8133479437020b6e2bd8bb82797c9703a52b02f7853fb5d014e1d13de78098ad0ae188d4ab21cb87facfaef54ae274558c88fc9c03fc19eaea4358eaf0c4c6c4d02e386be2f166bd289477334741ace8c06981581513d5b51dee7c897bcc33b17fe6903e63056a6d9ff54caa34c446f52f69a3c0ebd06a9f0ec62e0c1b5f8345d46bb4036b05fb3300deecda0283e18df0b49b47e7952e3520f74e5b356450ba6b24aa833c7d59cc9ffbe1951aec20b3614f5242568f73749727030217ae805e5e5c9c737d792f51d1c75ad6c6b31086a1e024e75be28c29aef5b1213973a4d0c318f92e0cb4383095b573aecae342fcb47ff303d55614ff6a9e458b2f91e95693960de2c7dd72eb54b6e529bd6fc98cb46a71aa2b113e91ee6d7f45ca13086a07c79a15462828fb1f0ff4020aa483c1d327737be39df21fc54b4bef9683342426eff62f2172dbfea47bd49f8a62f294930a59c7b99d5193ae7daf8c71836a1455c174a2bbd02aa72f5cab7e2601b21a26777eceaf9d13c3627e057f1894c0dbb41b61a2d538a868c589cb20a2b29fb303869a5add04617178b51ce3b91b72eefde91c0f54f7d9eafcdf38f70f2a5437718856ba9c2d0189d62447252542ae75d7ca055be6edb0aa1a4c74b9dbe1f1286cbfd88206a5f652b71d78f735fb13859060a9c56ddd0118f6d3d04fa7cc486ef1b3127e1250728877b543b2972d5e85cdeabf6c068f2b67d79381bacf7f0f9d3310f731927d8de66447d58fa9be68f4563fd7615ccd8ea42bddd0bd4d0a83586398845430387694d2bc2b26d343c5fdeba31d7d65fbe034f5951fd592731ed6f3672ffa20484cc8f9a93463b1b06174c7db9e90c9c40c7c6c69ff290809870f3f57b8fae170a03f88009992ffbfafbdfcaf4b29ef7b240e9211734f628ce94d64b0b8649eee2293ab1e74bbe569776fe13cf27c4b44c18905efe86324650432587f4232232aacf6d97869b3c342dcd31d01c6b9bf069aa07f23ce7cea6c38ddde7a8af02c508dbe7149588f185f26c59421c3448801d9f730a4f87b7a178803392ca7915b9b122110452f05b4f787b3929b364efc6b1c1184594b5d9fb7e0c0d51f2c16fc7a03c28fda96996950dd6dfacf8375aac1ce5eadbf1d9b42b94509d47b263243e8f63d99ddff0a31f2db46715dc7910969680b4a456af60a15407a7cdfa7f2d479fb4bd23b214e667bc9b16c004af7d89234a07fded3f1d37a3c15de3986c9a20755fbeaecafca3c11738fd6da6dfe220a6bbf4e7d02a437828082e46f2b2fc7e19ae95ade000ad396b0103c5ae0dad77aecc60e7fbdfe1dd8fd0a793b03ab1a9dd77007b57c5ae78e7a5af3cd21fd024dd1db5385f68fb4765d034a9bcf7656d3cafd1e84a2e610ab47ecf93f1c5f29d5b853483c69fa42b7122a4c2f7ca048ea7251ac4d88b197ed0686ed553cfc8834860f01483d3e30082ff83be856d37bfdf5f236cb7e70a04d2cb88adb7b1303ad251e0e0493717a5a794a2cd3528a1ba113867c26b65296553ed6697d4193104501ed106a2da7d77960ccf983dcd9e17bf1e0c18df80224689b0d643c4cad82ffe1d2df54f5f0ce7519fcc26432dc74667998e7546d7cb03b6f9354b59ae29730ab81d9baa9fdd4c069d7275b2f9d37989f3e7c7aa4d6e7fc806c2602ed912ba716907f79b3927ef16da4776b5500222343e67043e36fae7f4cc5e518cccc70271944d906de85636f9db9b2acc7036ea38d5adced17f54e63335ab396c5bef17be25c0e92d40572faf8ac9db2a4bb4e4b686471bdf74f63b927f3663eabc8e40a74784195b0ac179b205e052f885f27352b60876afb00810cdc4dfa02a215da169e7415044769ddd82b0b3214cba763906c96676693abd0a1200e6cef17da8bf498442b74a131691f597802110e9c2f226611334070e19f5e2df36830d1d845fd8d75390deb97ba0428702c9052482885c170ad75ed5e40ace314cc46dadd9d43c5265705f0b036f644430e7be8decb8e6e455fd9c5daefaf07db35eeec38069fa4e984e771aeeb2877fc4bcdf5c20a26f3e9cba0c81a0d47a3d9a5c1622e9357c4c3c44435b6eaea942aff6be26ed4c622033088d11b96d7fe74931faae90eda63dcd7df914f78cfe618cadec68ca08c643c3b0e9da79c230a"}]}, 0x800)

1m40.030585753s ago: executing program 1 (id=2527):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xdeb2}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000200c}, 0x20004010)

1m39.911242276s ago: executing program 1 (id=2530):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

1m39.73201446s ago: executing program 1 (id=2534):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x33b40}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)

1m39.197038943s ago: executing program 1 (id=2548):
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000200)={[{@acl}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@space_cache_v1}, {@clear_cache}, {@nobarrier}, {@noenospc_debug}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")

1m39.086145865s ago: executing program 32 (id=2548):
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000200)={[{@acl}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@space_cache_v1}, {@clear_cache}, {@nobarrier}, {@noenospc_debug}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")

1.775111447s ago: executing program 5 (id=4916):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000101c0)=@keyring={'key_or_keyring:', 0x0, 0x2})

1.6373423s ago: executing program 5 (id=4919):
r0 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x37}], 0x1, 0x40002000, 0x0)

1.556024162s ago: executing program 5 (id=4924):
r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}})

1.463282014s ago: executing program 2 (id=4925):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000040))

1.462733154s ago: executing program 5 (id=4926):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @private=0xa010101}}, @sadb_sa={0x2, 0x1, 0x1, 0x0, 0x8, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_key={0x2, 0x8, 0x10, 0x0, '|J'}]}, 0x60}}, 0x0)

1.391629336s ago: executing program 2 (id=4928):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7666, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x9, 0x3, 0x0, 0x63, 'syz1\x00', 0x6}, 0x3, 0x3, 0x5, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000040)=['%\'!#\x00'], 0x5})

1.22632914s ago: executing program 2 (id=4932):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x54, 0xe5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044844}, 0x0)

1.121203893s ago: executing program 2 (id=4934):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000003c0)={0x4, {0x200, 0x2, 0x6, 0x80}, {0x400, 0x5, 0x7, 0x101}, {0x3, 0x6}})

1.090682103s ago: executing program 5 (id=4935):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0)
pwritev2(r0, 0x0, 0x0, 0x20000010, 0x8, 0x0)

1.063332675s ago: executing program 0 (id=4936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r0, &(0x7f0000000540), 0x0}, 0x20)

1.037806235s ago: executing program 2 (id=4937):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x82, &(0x7f0000000040)=ANY=[], 0x13, 0x6371, &(0x7f0000007000)="$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")
lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0)

1.005403245s ago: executing program 5 (id=4939):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012c35b400304106098c9000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x6, 0x3, 'x9-'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

942.203347ms ago: executing program 0 (id=4940):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r0], 0x46c}}, 0x0)

890.437468ms ago: executing program 4 (id=4941):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000340)='./file2\x00', 0x280400b, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX=0x0], 0x41, 0x240, &(0x7f0000000c40)="$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")
listxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0)

856.942919ms ago: executing program 0 (id=4942):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x7, 0x6, 0x1, {0x1, @sdr={0x37303250, 0x7}}, 0xfffffeff})

787.418791ms ago: executing program 0 (id=4943):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
truncate(&(0x7f0000000900)='./file1\x00', 0x100071f)

656.278444ms ago: executing program 4 (id=4945):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x28, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)

566.125026ms ago: executing program 0 (id=4947):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000400000040000000050000000000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38)

506.619608ms ago: executing program 4 (id=4949):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00')
readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3)

454.573609ms ago: executing program 4 (id=4950):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x4, 0x30}, &(0x7f0000000040)=0xc)

397.62324ms ago: executing program 4 (id=4951):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x78, &(0x7f0000000040), 0x4)

271.131843ms ago: executing program 3 (id=4953):
r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000001480), 0x2, 0x0)
read$usbfs(r0, &(0x7f0000001800)=""/14, 0xe)

270.667694ms ago: executing program 4 (id=4954):
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x800001, 0x0, &(0x7f0000000000), 0x0)

257.481804ms ago: executing program 0 (id=4955):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2941, 0x0)

225.697935ms ago: executing program 3 (id=4956):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000002c0)="94", 0x1}], 0x2)

115.536367ms ago: executing program 2 (id=4957):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

107.500087ms ago: executing program 3 (id=4958):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000008", 0x8)

53.240749ms ago: executing program 3 (id=4959):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtaction={0x14, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}}, 0x14}}, 0x0)

29.213969ms ago: executing program 3 (id=4960):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000840)={0x3d, 0x1b, 0x5, 0x1a, 0x0, 0x100, 0x2, 0x5b, 0x1})

0s ago: executing program 3 (id=4961):
r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000480), 0x900, 0x121)
readv(r0, &(0x7f0000001500)=[{&(0x7f00000004c0)=""/2, 0x2}], 0x1)

kernel console output (not intermixed with test programs):

 dummy_hcd
[  181.513340][ T5606] radio-si470x 5-1:0.35: could not find interrupt in endpoint
[  181.535022][ T5606] radio-si470x: probe of 5-1:0.35 failed with error -5
[  181.744859][ T5606] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  181.864734][ T4229] usb 6-1: config 202 has an invalid interface number: 137 but max is 0
[  181.876516][ T4229] usb 6-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config
[  181.898020][ T4229] usb 6-1: config 202 has no interface number 0
[  181.911016][ T4229] usb 6-1: config 202 interface 137 altsetting 11 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.921666][ T4542] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  181.940459][ T4229] usb 6-1: config 202 interface 137 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[  181.961012][ T5606] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71)
[  181.969547][ T4229] usb 6-1: config 202 interface 137 has no altsetting 0
[  181.982765][ T5606] radio-raremono 5-1:0.35: V4L2 device registered as radio48
[  182.021614][ T5606] usb 5-1: USB disconnect, device number 17
[  182.038306][ T5606] radio-raremono 5-1:0.35: Thanko's Raremono disconnected
[  182.054198][T11138] loop3: detected capacity change from 0 to 32768
[  182.136026][T11138] XFS: attr2 mount option is deprecated.
[  182.145022][ T4229] usb 6-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=5b.ac
[  182.160929][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.169402][ T4542] usb 1-1: Using ep0 maxpacket: 16
[  182.175212][ T4229] usb 6-1: Product: syz
[  182.179385][ T4229] usb 6-1: Manufacturer: syz
[  182.184029][ T4229] usb 6-1: SerialNumber: syz
[  182.209401][T11138] XFS (loop3): Mounting V5 Filesystem
[  182.294770][ T4542] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  182.323658][T11138] XFS (loop3): Ending clean mount
[  182.354837][T11138] XFS (loop3): Quotacheck needed: Please wait.
[  182.446152][T11138] XFS (loop3): Quotacheck: Done.
[  182.475424][ T4542] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  182.495009][ T4542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.515812][ T4229] io_ti 6-1:202.137: required endpoints missing
[  182.535168][ T4229] usb 6-1: USB disconnect, device number 3
[  182.546468][ T4542] usb 1-1: Product: syz
[  182.551006][ T4542] usb 1-1: Manufacturer: syz
[  182.585121][ T4542] usb 1-1: SerialNumber: syz
[  182.599541][ T4542] r8152-cfgselector 1-1: config 0 descriptor??
[  182.620695][ T4193] XFS (loop3): Unmounting Filesystem
[  182.682456][T11163] loop4: detected capacity change from 0 to 2048
[  182.733559][T11163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.071655][T11179] loop5: detected capacity change from 0 to 16
[  183.086754][ T4542] r8152-cfgselector 1-1: Unknown version 0x0000
[  183.098983][ T4542] r8152-cfgselector 1-1: USB disconnect, device number 14
[  183.168476][T11179] erofs: (device loop5): mounted with root inode @ nid 36.
[  183.568843][T11208] loop5: detected capacity change from 0 to 4096
[  183.587927][T11221] loop4: detected capacity change from 0 to 64
[  183.635670][T11208] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  183.812329][T11234] __nla_validate_parse: 25 callbacks suppressed
[  183.812345][T11234] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3067'.
[  183.879428][T11234] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3067'.
[  183.930378][T11234] netlink: 81 bytes leftover after parsing attributes in process `syz.2.3067'.
[  184.067476][T11248] loop4: detected capacity change from 0 to 512
[  184.163788][T11248] EXT4-fs (loop4): Ignoring removed orlov option
[  184.198730][T11248] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  184.255792][T11248] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  184.279699][T11248] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3072: attempt to clear invalid blocks 2 len 1
[  184.420867][T11248] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  184.510147][T11248] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3072: invalid indirect mapped block 1819239214 (level 0)
[  184.615199][T11248] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3072: invalid indirect mapped block 1819239214 (level 1)
[  184.625496][T11287] tc_dump_action: action bad kind
[  184.696720][T11248] EXT4-fs (loop4): 1 truncate cleaned up
[  184.702437][T11248] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,init_itable=0x0000000000000003,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback.
[  184.893252][T11296] comedi comedi1: Cannot bond this driver to itself!
[  184.956064][T11301] mmap: syz.0.3090 (11301) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  185.091569][T11308] loop2: detected capacity change from 0 to 64
[  185.491702][T11279] loop5: detected capacity change from 0 to 32768
[  185.599632][T11279] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  185.624443][T11279] BTRFS info (device loop5): turning on sync discard
[  185.650081][T11279] BTRFS info (device loop5): using free space tree
[  185.667067][T11279] BTRFS info (device loop5): has skinny extents
[  185.784675][ T4229] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  185.798912][T11362] loop0: detected capacity change from 0 to 4096
[  185.880503][T11376] comedi comedi3: No hardware detected at I/O base 0x3c4
[  185.892272][T11279] BTRFS info (device loop5): enabling ssd optimizations
[  185.929431][T11362] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  185.996373][T11362] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  186.044917][ T4229] usb 4-1: Using ep0 maxpacket: 32
[  186.164937][ T4229] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  186.173146][ T4229] usb 4-1: config 0 has no interface number 0
[  186.198994][ T4229] usb 4-1: config 0 interface 153 has no altsetting 0
[  186.405171][ T4229] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  186.414350][ T4229] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  186.505407][ T4229] usb 4-1: Product: syz
[  186.509616][ T4229] usb 4-1: Manufacturer: syz
[  186.555511][ T4229] usb 4-1: SerialNumber: syz
[  186.581869][ T4229] usb 4-1: config 0 descriptor??
[  186.679366][T11419] loop4: detected capacity change from 0 to 512
[  186.744490][T11419] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.3131: inode has both inline data and extents flags
[  186.770417][T11419] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.3131: couldn't read orphan inode 15 (err -117)
[  186.849715][T11419] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,debug_want_extra_isize=0x0000000000000006,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none.
[  186.905412][ T4229] hub 4-1:0.153: bad descriptor, ignoring hub
[  186.911533][ T4229] hub: probe of 4-1:0.153 failed with error -5
[  186.923737][T11419] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  186.941899][ T4229] sierra 4-1:0.153: Sierra USB modem converter detected
[  187.000521][ T4229] usb 4-1: USB disconnect, device number 17
[  187.007684][ T4229] sierra 4-1:0.153: device disconnected
[  187.087352][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3138'.
[  187.114946][T11446] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3138'.
[  187.200426][T11452] loop5: detected capacity change from 0 to 256
[  187.238663][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3143'.
[  187.271616][T11459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3144'.
[  187.762757][T11504] loop4: detected capacity change from 0 to 256
[  187.838045][T11504] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0x14e42e2d, utbl_chksum : 0xe619d30d)
[  187.961548][T11504] exFAT-fs (loop4): error, invalid size(size(0) > aligned(9223372036854777344)
[  187.961548][T11504] 
[  188.015048][T11504] exFAT-fs (loop4): Filesystem has been set read-only
[  188.296790][T11553] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3181'.
[  188.393423][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3181'.
[  188.417030][T11562] comedi comedi4: bad chanlist[0]=0x00200000 chan=0 range length=2
[  188.469585][T11553] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3181'.
[  188.502527][T11553] netlink: 'syz.4.3181': attribute type 2 has an invalid length.
[  188.514700][T11572] loop2: detected capacity change from 0 to 512
[  188.585285][T11572] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  188.644347][T11572] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  188.656930][T11572] EXT4-fs (loop2): orphan cleanup on readonly fs
[  188.681843][T11572] EXT4-fs (loop2): 1 truncate cleaned up
[  188.724857][T11572] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  188.962944][T11602] device vti0 entered promiscuous mode
[  189.245493][T11614] loop0: detected capacity change from 0 to 512
[  189.284931][T11615] loop5: detected capacity change from 0 to 1764
[  189.332265][T11614] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  189.461735][T11614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  189.527721][T11632] __nla_validate_parse: 1 callbacks suppressed
[  189.527739][T11632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3214'.
[  189.545454][T11614] EXT4-fs (loop0): orphan cleanup on readonly fs
[  189.551820][T11614] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.3208: bad orphan inode 3
[  189.580816][T11614] EXT4-fs (loop0): Remounting filesystem read-only
[  189.589527][T11614] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none.
[  189.661707][T11640] loop5: detected capacity change from 0 to 2048
[  189.731731][T11614] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.3208: dx entry: limit 0 != root limit 125
[  189.744660][T11640] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=2362, location=2362
[  189.780184][T11614] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3208: Corrupt directory, running e2fsck is recommended
[  189.793769][T11640] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  189.862139][T11640] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  189.917594][T11640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.951174][   T26] audit: type=1800 audit(1787660066.540:18): pid=11640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3215" name=2E02 dev="loop5" ino=1367 res=0 errno=0
[  190.204725][ T4544] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  190.315023][ T4229] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  190.564794][ T4229] usb 5-1: Using ep0 maxpacket: 8
[  190.653661][T11701] tmpfs: Bad value for 'mpol'
[  190.725322][ T4229] usb 5-1: unable to get BOS descriptor or descriptor too short
[  190.734886][ T4544] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  190.743997][ T4544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.813173][ T4544] usb 3-1: Product: syz
[  190.818012][ T4229] usb 5-1: config 6 has an invalid interface number: 14 but max is 0
[  190.828462][ T4229] usb 5-1: config 6 has no interface number 0
[  190.834918][ T4544] usb 3-1: Manufacturer: syz
[  190.859899][ T4544] usb 3-1: SerialNumber: syz
[  190.865601][ T4229] usb 5-1: config 6 interface 14 has no altsetting 0
[  190.875770][ T4544] usb 3-1: config 0 descriptor??
[  190.916668][ T4544] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  191.046479][ T4229] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=6e.c2
[  191.061893][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.096783][ T4229] usb 5-1: Product: syz
[  191.101005][ T4229] usb 5-1: Manufacturer: syz
[  191.122170][ T4229] usb 5-1: SerialNumber: syz
[  191.354942][ T4544] gspca_sunplus: reg_w_riv err -71
[  191.361873][ T4544] sunplus: probe of 3-1:0.0 failed with error -71
[  191.399951][ T4544] usb 3-1: USB disconnect, device number 13
[  191.413077][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'.
[  191.439910][T11759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3263'.
[  191.507618][ T4229] usb 5-1: USB disconnect, device number 18
[  191.580865][T11766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3266'.
[  191.722157][T11777] loop3: detected capacity change from 0 to 512
[  191.734017][T11779] x_tables: unsorted underflow at hook 3
[  191.805014][T11777] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3271: bg 0: block 184: padding at end of block bitmap is not set
[  191.836588][T11777] EXT4-fs (loop3): Remounting filesystem read-only
[  191.860224][T11777] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  191.911616][T11777] EXT4-fs (loop3): Remounting filesystem read-only
[  191.949412][T11777] EXT4-fs (loop3): 1 truncate cleaned up
[  191.970125][T11777] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback.
[  191.983117][T11777] ext4 filesystem being mounted at /660/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.219948][T11802] loop2: detected capacity change from 0 to 1024
[  192.246214][T11813] loop4: detected capacity change from 0 to 512
[  192.270565][T11802] EXT4-fs (loop2): Ignoring removed bh option
[  192.287453][T11802] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5
[  192.287453][T11802] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  192.287453][T11802] 
[  192.319805][T11813] EXT4-fs (loop4): Ignoring removed bh option
[  192.363661][T11813] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  192.389461][T11802] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noload,barrier=0x0000000000000804,nolazytime,abort,lazytime,grpquota,stripe=0x0000000000000005,bh,init_itable,nouser_xattr,,errors=continue. Quota mode: writeback.
[  192.422738][T11813] EXT4-fs (loop4): 1 truncate cleaned up
[  192.428969][T11813] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none.
[  192.491804][T11813] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none.
[  192.622297][T11840] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  192.791041][T11854] device sit0 entered promiscuous mode
[  192.838514][T11854] netlink: 'syz.4.3302': attribute type 1 has an invalid length.
[  192.881148][T11854] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3302'.
[  193.132522][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3310'.
[  193.332741][T11893] kAFS: unable to lookup cell '.,'
[  193.366955][T11897] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3321'.
[  193.451404][T11902] loop4: detected capacity change from 0 to 64
[  193.601497][T11918] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3334'.
[  193.786804][ T2299] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  193.798941][T11937] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3342'.
[  193.948722][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3347'.
[  194.034653][ T5658] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  194.064980][ T2299] usb 1-1: Using ep0 maxpacket: 16
[  194.118447][T11952] loop5: detected capacity change from 0 to 64
[  194.141829][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.148203][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.210401][ T2299] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  194.234530][ T2299] usb 1-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[  194.286297][ T2299] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  194.312520][ T2299] usb 1-1: config 1 has no interface number 1
[  194.318950][ T2299] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  194.346678][ T2299] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7
[  194.484859][ T5658] usb 3-1: unable to get BOS descriptor or descriptor too short
[  194.546001][ T4229] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  194.546314][ T5658] usb 3-1: not running at top speed; connect to a high speed hub
[  194.561716][ T2299] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  194.596512][ T2299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.618596][ T2299] usb 1-1: Product: syz
[  194.622828][ T2299] usb 1-1: Manufacturer: syz
[  194.628028][ T2299] usb 1-1: SerialNumber: syz
[  194.735051][ T5658] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4
[  194.768062][ T5658] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4
[  194.798853][ T4229] usb 4-1: Using ep0 maxpacket: 32
[  194.924875][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.999870][ T2299] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  195.012181][ T2299] usb 1-1: found format II with max.bitrate = 0, frame size=0
[  195.032218][ T2299] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  195.043765][T11996] loop5: detected capacity change from 0 to 4096
[  195.053330][T12000] netlink: 'syz.4.3374': attribute type 1 has an invalid length.
[  195.069356][ T5658] usb 3-1: string descriptor 0 read error: -22
[  195.084077][ T5658] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  195.098374][ T2299] usb 1-1: USB disconnect, device number 15
[  195.104938][ T4229] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  195.130983][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.148119][ T4443] udevd[4443]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory
[  195.162289][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.195527][ T4229] usb 4-1: Product: syz
[  195.200057][ T4229] usb 4-1: Manufacturer: syz
[  195.205229][ T4443] udevd[4443]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  195.217462][ T4229] usb 4-1: SerialNumber: syz
[  195.236001][ T4229] usb 4-1: config 0 descriptor??
[  195.285698][ T4229] usb 4-1: bad CDC descriptors
[  195.290898][ T4229] usb 4-1: unsupported MDLM descriptors
[  195.395658][T12009] loop4: detected capacity change from 0 to 512
[  195.493724][T12015] netlink: 'syz.0.3381': attribute type 4 has an invalid length.
[  195.507945][T12009] EXT4-fs (loop4): Ignoring removed oldalloc option
[  195.532491][T12009] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  195.553591][ T4229] usb 4-1: USB disconnect, device number 18
[  195.591170][T12009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  195.649883][T12009] EXT4-fs (loop4): orphan cleanup on readonly fs
[  195.676611][ T4548] usb 3-1: USB disconnect, device number 14
[  195.678395][T12024] loop5: detected capacity change from 0 to 1024
[  195.695035][T12009] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.3377: bad orphan inode 267
[  195.712820][T12009] EXT4-fs (loop4): Remounting filesystem read-only
[  195.719446][T12009] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none.
[  195.747230][T12009] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.3377: dx entry: limit 0 != root limit 125
[  195.760481][T12009] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3377: Corrupt directory, running e2fsck is recommended
[  195.794155][T12026] loop0: detected capacity change from 0 to 512
[  195.949673][T12026] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.3386: inode has both inline data and extents flags
[  196.003593][T12031] xt_hashlimit: size too large, truncated to 1048576
[  196.075865][T12031] xt_hashlimit: max too large, truncated to 1048576
[  196.089703][T12026] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.3386: couldn't read orphan inode 15 (err -117)
[  196.146271][T12026] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,debug_want_extra_isize=0x0000000000000006,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none.
[  196.232575][T12026] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  196.281276][T12036] loop3: detected capacity change from 0 to 4096
[  196.435261][T12036] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  196.591824][T12053] netlink: 'syz.0.3399': attribute type 3 has an invalid length.
[  196.604833][T12036] ntfs3: loop3: ntfs_sync_inode r=1e failed, -22.
[  196.624954][T12036] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  196.774995][    T9] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22.
[  196.830227][ T4193] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22.
[  197.084027][T12040] loop5: detected capacity change from 0 to 32768
[  197.138518][T12076] __nla_validate_parse: 3 callbacks suppressed
[  197.138535][T12076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3409'.
[  197.190058][T12076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3409'.
[  197.211013][T12082] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  197.240005][T12084] netlink: 'syz.4.3414': attribute type 6 has an invalid length.
[  197.254028][T12040] (syz.5.3392,12040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xde0877ff. Applying ECC.
[  197.265929][T12084] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3414'.
[  197.320987][T12040] (syz.5.3392,12040,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xfaa975d8, computed 0xce7aacd7
[  197.424174][T12040] (syz.5.3392,12040,1):ocfs2_verify_volume:2390 ERROR: status = -5
[  197.446555][T12040] (syz.5.3392,12040,1):ocfs2_fill_super:991 ERROR: superblock probe failed!
[  197.489878][T12040] (syz.5.3392,12040,1):ocfs2_fill_super:1177 ERROR: status = -5
[  197.582225][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'.
[  197.664309][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'.
[  197.709863][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'.
[  197.771048][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'.
[  197.812244][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'.
[  197.854238][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'.
[  197.854787][ T4548] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  197.894796][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'.
[  198.284954][ T4548] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  198.294129][ T4548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.353832][ T4548] usb 3-1: config 0 descriptor??
[  198.399127][T12156] loop0: detected capacity change from 0 to 164
[  198.529528][T12156] iso9660: Corrupted directory entry in block 2 of inode 1920
[  198.684871][ T4548] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  198.693436][ T4548] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  198.782155][ T4548] [drm:udl_init] *ERROR* Selecting channel failed
[  198.830553][T12185] MTD: Couldn't look up 'mtd0/file0': -2
[  198.835194][ T4548] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  198.874710][ T4548] [drm] Initialized udl on minor 2
[  198.917225][ T4548] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  198.922790][T12192] loop0: detected capacity change from 0 to 64
[  198.936443][ T4548] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  198.977904][ T4548] usb 3-1: USB disconnect, device number 15
[  198.997876][ T4229] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  199.042654][ T4229] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  199.075257][ T4229] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  199.203495][T12208] loop5: detected capacity change from 0 to 512
[  199.303113][T12208] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  199.504649][T12208] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  199.547523][T12208] ext4 filesystem being mounted at /155/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.593944][T12208] EXT4-fs error (device loop5): __ext4_new_inode:1082: comm syz.5.3466: reserved inode found cleared - inode=1
[  199.804957][T12240] loop2: detected capacity change from 0 to 512
[  199.958650][T12240] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  199.993630][T12240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  200.047268][T12240] EXT4-fs (loop2): orphan cleanup on readonly fs
[  200.053787][T12240] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.3479: bad orphan inode 3
[  200.068809][T12257] delete_channel: no stack
[  200.074334][T12240] EXT4-fs (loop2): Remounting filesystem read-only
[  200.133087][T12240] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none.
[  200.161184][T12240] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3479: dx entry: limit 0 != root limit 125
[  200.180105][T12240] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3479: Corrupt directory, running e2fsck is recommended
[  200.381713][ T4548] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  200.686058][T12281] loop2: detected capacity change from 0 to 8
[  200.744985][ T4548] usb 6-1: config index 0 descriptor too short (expected 2075, got 27)
[  200.755281][ T4548] usb 6-1: config 0 has an invalid interface number: 200 but max is 0
[  200.774692][ T4548] usb 6-1: config 0 has no interface number 0
[  200.780866][ T4548] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12408, setting to 64
[  200.795012][T12281] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  200.801824][ T4548] usb 6-1: config 0 interface 200 has no altsetting 0
[  200.844320][T12281] cramfs: Error -3 while decompressing!
[  200.852381][T12281] cramfs: ffffffff9641e068(18)->ffff888051bb4000(4096)
[  200.895162][T12281] cramfs: Error -3 while decompressing!
[  200.895753][ T4443] udevd[4443]: incorrect cramfs checksum on /dev/loop2
[  200.900741][T12281] cramfs: ffffffff9641e068(18)->ffff888051bb4000(4096)
[  200.965660][ T4548] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  200.970646][ T4443] udevd[4443]: incorrect cramfs checksum on /dev/loop2
[  200.980238][   T26] audit: type=1800 audit(1787660077.570:19): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3498" name="file1" dev="loop2" ino=324 res=0 errno=0
[  201.009993][ T4548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.014630][ T5658] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  201.041423][ T4548] usb 6-1: Product: syz
[  201.051682][ T4548] usb 6-1: Manufacturer: syz
[  201.056774][ T4548] usb 6-1: SerialNumber: syz
[  201.063194][ T4443] udevd[4443]: incorrect cramfs checksum on /dev/loop2
[  201.082109][ T4548] usb 6-1: config 0 descriptor??
[  201.314765][ T5658] usb 4-1: Using ep0 maxpacket: 16
[  201.407513][ T4548] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input14
[  201.455055][ T5658] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  201.472563][ T4548] usb 6-1: USB disconnect, device number 4
[  201.481397][ T5658] usb 4-1: config 0 has no interface number 0
[  201.694873][ T5658] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  201.721957][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.757935][ T5658] usb 4-1: Product: syz
[  201.792709][ T5658] usb 4-1: Manufacturer: syz
[  201.802842][ T5658] usb 4-1: SerialNumber: syz
[  201.831570][ T5658] usb 4-1: config 0 descriptor??
[  201.885416][ T5658] hub 4-1:0.132: bad descriptor, ignoring hub
[  201.892072][ T5658] hub: probe of 4-1:0.132 failed with error -5
[  201.939951][ T5658] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input15
[  202.181296][T12350] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  202.214339][T12350] __nla_validate_parse: 17 callbacks suppressed
[  202.214354][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3531'.
[  202.361902][T12360] xt_CT: You must specify a L4 protocol and not use inversions on it
[  202.485126][ T5661] usb 4-1: USB disconnect, device number 19
[  202.886808][T12391] kernel profiling enabled (shift: 9)
[  202.947676][T12393] loop4: detected capacity change from 0 to 16
[  202.970366][T12395] netlink: 'syz.0.3555': attribute type 1 has an invalid length.
[  202.998427][T12393] erofs: (device loop4): mounted with root inode @ nid 36.
[  203.084766][ T4548] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  203.334918][ T4548] usb 3-1: Using ep0 maxpacket: 8
[  203.495002][ T4548] usb 3-1: unable to get BOS descriptor or descriptor too short
[  203.584797][ T4548] usb 3-1: config 127 has an invalid interface number: 189 but max is 0
[  203.603250][ T4548] usb 3-1: config 127 has no interface number 0
[  203.619917][ T4548] usb 3-1: config 127 interface 189 has no altsetting 0
[  203.657441][T12436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3574'.
[  203.673172][T12436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3574'.
[  203.696139][T12436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3574'.
[  203.804840][ T4548] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=7c.4e
[  203.820208][ T4548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.833562][ T4548] usb 3-1: Product: syz
[  203.844928][ T4548] usb 3-1: Manufacturer: syz
[  203.861657][ T4548] usb 3-1: SerialNumber: syz
[  203.924786][T12451] loop3: detected capacity change from 0 to 2048
[  203.988095][T12451] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback.
[  204.007605][T12451] ext4 filesystem being mounted at /710/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.055941][ T4542] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  204.422106][ T4542] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  204.444746][ T4548] usb 3-1: USB disconnect, device number 16
[  204.451487][ T4542] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.464994][ T4542] usb 1-1: config 0 has no interface number 0
[  204.486601][ T4542] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  204.503375][T12461] loop3: detected capacity change from 0 to 8192
[  204.549381][T12461] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  204.572817][T12461] REISERFS (device loop3): using ordered data mode
[  204.579895][T12461] reiserfs: using flush barriers
[  204.586177][T12461] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  204.608699][T12461] REISERFS (device loop3): checking transaction log (loop3)
[  204.674907][ T4542] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  204.686913][ T4542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.695866][ T4542] usb 1-1: Product: syz
[  204.700056][ T4542] usb 1-1: Manufacturer: syz
[  204.705139][ T4542] usb 1-1: SerialNumber: syz
[  204.710330][ T4443] udevd[4443]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:127.189/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.723246][ T4542] usb 1-1: config 0 descriptor??
[  204.777639][ T4542] radio-si470x 1-1:0.35: could not find interrupt in endpoint
[  204.785487][ T4365] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  204.803326][T12461] REISERFS (device loop3): Using tea hash to sort names
[  204.803867][ T4542] radio-si470x: probe of 1-1:0.35 failed with error -5
[  204.825047][T12461] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  204.994938][ T4542] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  205.034676][ T4365] usb 5-1: Using ep0 maxpacket: 32
[  205.159658][ T4365] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.172321][ T4365] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  205.209604][ T4542] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71)
[  205.217235][ T4548] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  205.226877][ T4542] radio-raremono 1-1:0.35: V4L2 device registered as radio48
[  205.243293][ T4542] usb 1-1: USB disconnect, device number 16
[  205.250659][ T4542] radio-raremono 1-1:0.35: Thanko's Raremono disconnected
[  205.344877][ T4365] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  205.354016][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.369191][ T4365] usb 5-1: Product: syz
[  205.373586][ T4365] usb 5-1: Manufacturer: syz
[  205.380370][ T4365] usb 5-1: SerialNumber: syz
[  205.384718][ T2299] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  205.400301][ T4365] usb 5-1: config 0 descriptor??
[  205.590105][T12511] nvme_tcp: malformed address passed: 127.:.0.1:44%0
[  205.644801][ T2299] usb 6-1: Using ep0 maxpacket: 16
[  205.664891][ T4365] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device:
[  205.682273][ T4365] f0 e4 3d a7 d3 60 4f fe 
[  205.687329][ T4365] snd-usb-6fire: probe of 5-1:0.0 failed with error -5
[  205.749171][   T26] audit: type=1326 audit(1787660082.340:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.3.3614" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd16a4330d9 code=0x0
[  205.777909][ T4548] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  205.789412][ T4548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.798148][ T4548] usb 3-1: Product: syz
[  205.805009][ T2299] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  205.815020][ T4548] usb 3-1: Manufacturer: syz
[  205.819646][ T4548] usb 3-1: SerialNumber: syz
[  205.827902][ T2299] usb 6-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[  205.839859][ T4548] usb 3-1: config 0 descriptor??
[  205.852463][ T2299] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  205.862521][ T2299] usb 6-1: config 1 has no interface number 1
[  205.868440][ T4365] usb 5-1: USB disconnect, device number 19
[  205.873862][ T2299] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  205.894425][ T2299] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7
[  205.906201][ T4548] hub 3-1:0.0: bad descriptor, ignoring hub
[  205.912134][ T4548] hub: probe of 3-1:0.0 failed with error -5
[  205.922578][ T4548] usbsevseg 3-1:0.0: USB 7 Segment device now attached
[  206.060188][T12536] netlink: 'syz.3.3621': attribute type 13 has an invalid length.
[  206.094981][ T2299] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  206.104147][ T2299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.133437][ T2299] usb 6-1: Product: syz
[  206.146382][ T2299] usb 6-1: Manufacturer: syz
[  206.161330][ T2299] usb 6-1: SerialNumber: syz
[  206.229669][T12546] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  206.264893][ T4548] usb 3-1: USB disconnect, device number 17
[  206.271971][ T4548] usbsevseg 3-1:0.0: USB 7 Segment now disconnected
[  206.334773][ T6052] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  206.504931][ T2299] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  206.518193][ T2299] usb 6-1: found format II with max.bitrate = 0, frame size=0
[  206.527335][ T2299] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  206.577833][ T2299] usb 6-1: USB disconnect, device number 5
[  206.610793][T12569] netlink: 'syz.4.3637': attribute type 21 has an invalid length.
[  206.636524][T12569] IPv6: NLM_F_CREATE should be specified when creating new route
[  206.644374][T12569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.652296][T12569] IPv6: NLM_F_CREATE should be set when creating new route
[  206.659614][T12569] IPv6: NLM_F_CREATE should be set when creating new route
[  206.666868][T12569] IPv6: NLM_F_CREATE should be set when creating new route
[  206.777774][ T6052] usb 1-1: config 0 has an invalid interface number: 168 but max is 0
[  206.794917][ T6052] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.809941][ T6052] usb 1-1: config 0 has no interface number 0
[  206.817214][ T6052] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  206.831818][ T6052] usb 1-1: config 0 interface 168 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  206.845472][ T4443] udevd[4443]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.862181][ T6052] usb 1-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  206.878278][ T6052] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98
[  206.889547][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.924033][ T6052] usb 1-1: config 0 descriptor??
[  206.986783][ T6052] HFC-S_USB: probe of 1-1:0.168 failed with error -5
[  207.194722][ T2299] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  207.231385][ T4548] usb 1-1: USB disconnect, device number 17
[  207.362512][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3660'.
[  207.373094][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3660'.
[  207.395129][T12616] device xfrm0 entered promiscuous mode
[  207.411588][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3660'.
[  207.464827][ T2299] usb 3-1: Using ep0 maxpacket: 32
[  207.524802][ T5661] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  207.604946][ T2299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  207.632391][ T2299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[  207.741781][T12641] x_tables: duplicate entry at hook 4
[  207.804703][ T5661] usb 4-1: Using ep0 maxpacket: 16
[  207.814288][T12645] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave
[  207.834906][ T2299] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  207.854264][ T2299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.872969][T12645] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0)
[  207.884528][ T2299] usb 3-1: Product: syz
[  207.889246][ T2299] usb 3-1: Manufacturer: syz
[  207.902950][ T2299] usb 3-1: SerialNumber: syz
[  207.924543][ T2299] usb 3-1: config 0 descriptor??
[  207.945099][ T5661] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.955776][T12583] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  207.985506][ T5661] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.045757][T12660] SET target dimension over the limit!
[  208.102226][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3683'.
[  208.189744][ T5661] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  208.209214][ T5661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.218973][ T2299] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16
[  208.238682][ T5661] usb 4-1: Product: syz
[  208.251175][ T5661] usb 4-1: Manufacturer: syz
[  208.263927][ T5661] usb 4-1: SerialNumber: syz
[  208.392603][T12682] loop5: detected capacity change from 0 to 2048
[  208.444640][ T5658] usb 3-1: USB disconnect, device number 18
[  208.565033][T12682] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback.
[  208.598972][T12682] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.635095][ T5661] usb 4-1: 0:2 : does not exist
[  208.660510][ T5661] usb 4-1: USB disconnect, device number 20
[  208.790398][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3703'.
[  208.844729][ T4548] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  208.910720][ T9080] udevd[9080]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  209.094835][ T4548] usb 1-1: Using ep0 maxpacket: 16
[  209.215064][ T4548] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  209.225709][ T4548] usb 1-1: config 0 has no interface number 0
[  209.255345][T12736] CIFS: VFS: Malformed UNC in devname
[  209.311968][T12737] xt_CT: No such helper "snmp_trap"
[  209.369216][T12748] netlink: 'syz.4.3722': attribute type 20 has an invalid length.
[  209.388069][T12748] IPv6: NLM_F_CREATE should be specified when creating new route
[  209.410341][ T4548] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  209.428085][T12750] loop3: detected capacity change from 0 to 512
[  209.447465][ T4548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.466596][ T4548] usb 1-1: Product: syz
[  209.471098][ T4548] usb 1-1: Manufacturer: syz
[  209.478033][ T4548] usb 1-1: SerialNumber: syz
[  209.485311][ T4548] usb 1-1: config 0 descriptor??
[  209.525182][T12750] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.3723: Attempting to read directory block (0) that is past i_size (16)
[  209.541921][ T4548] hub 1-1:0.132: bad descriptor, ignoring hub
[  209.548196][ T4548] hub: probe of 1-1:0.132 failed with error -5
[  209.549696][T12750] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  209.557375][ T4548] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input17
[  209.582464][T12750] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000080,data_err=ignore,auto_da_alloc,discard,norecovery,grpjquota=.test_dummy_encryption=v1,sysvgroups,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  209.847619][T12773] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3733'.
[  210.274238][T12805] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  210.281408][T12805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  210.319981][T12805] vhci_hcd vhci_hcd.0: Device attached
[  210.335950][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3753'.
[  210.359591][T12812] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6)
[  210.366139][T12812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  210.472865][T12812] vhci_hcd vhci_hcd.0: Device attached
[  210.511349][T12814] vhci_hcd: connection closed
[  210.514764][ T4542] vhci_hcd: vhci_device speed not set
[  210.529460][ T4285] vhci_hcd: stop threads
[  210.536915][T12807] vhci_hcd: connection closed
[  210.554976][ T4285] vhci_hcd: release socket
[  210.597535][ T4285] vhci_hcd: disconnect device
[  210.624670][ T4542] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  210.649856][ T4285] vhci_hcd: stop threads
[  210.663898][ T4285] vhci_hcd: release socket
[  210.678825][ T4285] vhci_hcd: disconnect device
[  210.909963][T12848] netlink: zone id is out of range
[  211.262559][T12876] loop0: detected capacity change from 0 to 16
[  211.294904][ T4229] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  211.309317][T12876] erofs: (device loop0): mounted with root inode @ nid 36.
[  211.362210][T12882] loop5: detected capacity change from 0 to 1024
[  211.374519][T12876] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  211.426890][T12876] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  211.496411][T12889] overlayfs: missing 'lowerdir'
[  211.502268][T12882] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  211.529814][T12882] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.564763][ T4229] usb 4-1: Using ep0 maxpacket: 16
[  211.574545][T12882] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.3786: corrupted xattr block 128
[  211.636358][   T26] audit: type=1800 audit(1787660088.230:21): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3786" name="file1" dev="loop5" ino=15 res=0 errno=0
[  211.685793][ T4229] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  211.694019][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.754971][ T4229] usb 4-1: config 0 has no interface number 0
[  211.934896][ T4229] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  211.940670][T12909] loop2: detected capacity change from 0 to 8192
[  211.978075][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.995283][ T4229] usb 4-1: Product: syz
[  212.005346][ T4229] usb 4-1: Manufacturer: syz
[  212.015459][ T4229] usb 4-1: SerialNumber: syz
[  212.032187][ T4229] usb 4-1: config 0 descriptor??
[  212.051174][T12909] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  212.104909][T12909] REISERFS (device loop2): using ordered data mode
[  212.124308][T12909] reiserfs: using flush barriers
[  212.158721][T12909] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  212.250264][T12909] REISERFS (device loop2): checking transaction log (loop2)
[  212.284116][T12909] REISERFS (device loop2): Using r5 hash to sort names
[  212.312141][T12936] loop4: detected capacity change from 0 to 512
[  212.313615][ T4544] usb 4-1: USB disconnect, device number 21
[  212.331664][T12909] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  212.423779][T12936] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3812: bg 0: block 313: padding at end of block bitmap is not set
[  212.500528][T12936] EXT4-fs (loop4): Remounting filesystem read-only
[  212.572774][T12936] EXT4-fs (loop4): 1 truncate cleaned up
[  212.584072][T12936] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback.
[  213.005812][T12958] xt_hashlimit: size too large, truncated to 1048576
[  213.160788][T12967] sctp: [Deprecated]: syz.5.3825 (pid 12967) Use of int in maxseg socket option.
[  213.160788][T12967] Use struct sctp_assoc_value instead
[  213.193896][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3826'.
[  213.455263][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'.
[  213.738300][T13010] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  213.774984][T13010] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  213.799054][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3847'.
[  213.799658][T12999] loop0: detected capacity change from 0 to 8192
[  213.905932][T12999] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  213.919526][T12999] REISERFS (device loop0): using ordered data mode
[  213.934954][T13025] loop5: detected capacity change from 0 to 512
[  213.941331][T12999] reiserfs: using flush barriers
[  213.947519][T12999] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  213.964322][T12999] REISERFS (device loop0): checking transaction log (loop0)
[  213.975934][T12999] REISERFS (device loop0): Using r5 hash to sort names
[  213.983163][T12999] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  214.001454][T13025] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  214.109292][T13025] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6)
[  214.124164][T13025] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  214.135324][T13025] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.3852: Failed to acquire dquot type 1
[  214.148552][T13025] EXT4-fs (loop5): 1 truncate cleaned up
[  214.154315][T13025] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,discard,nodelalloc,minixdf,min_batch_time=0x0000000000000002,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback.
[  214.186248][T13025] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6)
[  214.196000][T13025] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  214.205730][T13025] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.3852: Failed to acquire dquot type 1
[  214.268154][T13038] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3857'.
[  214.284683][ T4548] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  214.480283][ T4365] usb 1-1: USB disconnect, device number 18
[  214.523997][T13052] loop0: detected capacity change from 0 to 164
[  214.544738][ T4548] usb 5-1: Using ep0 maxpacket: 16
[  214.620470][T13052] iso9660: Corrupted directory entry in block 2 of inode 1792
[  214.664962][ T4548] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  214.791756][T13068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3872'.
[  214.834817][ T4548] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  214.860980][ T4548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.878375][ T4548] usb 5-1: Product: syz
[  214.891459][ T4548] usb 5-1: Manufacturer: syz
[  214.910677][ T4548] usb 5-1: SerialNumber: syz
[  214.922604][ T4548] r8152-cfgselector 5-1: config 0 descriptor??
[  214.984327][T13082] netlink: 'syz.5.3879': attribute type 1 has an invalid length.
[  214.993354][T13082] netlink: 212908 bytes leftover after parsing attributes in process `syz.5.3879'.
[  215.204854][ T4365] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  215.232558][T13101] loop5: detected capacity change from 0 to 1024
[  215.252504][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3889'.
[  215.326851][T13107] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3892'.
[  215.404770][ T4548] r8152-cfgselector 5-1: Unknown version 0x0000
[  215.428537][ T4548] r8152-cfgselector 5-1: USB disconnect, device number 20
[  215.492621][T13109] loop3: detected capacity change from 0 to 4096
[  215.552941][T13119] loop5: detected capacity change from 0 to 512
[  215.566224][T13109] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  215.575070][ T4365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.602851][ T4365] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  215.654032][   T26] audit: type=1800 audit(1787660092.240:22): pid=13119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3897" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  215.727823][ T4193] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  215.824650][ T4542] vhci_hcd: vhci_device speed not set
[  215.829821][T13123] loop0: detected capacity change from 0 to 64
[  215.864884][ T4365] usb 3-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice= 0.00
[  215.873981][ T4365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.882778][ T4365] usb 3-1: Product: syz
[  215.891799][ T4365] usb 3-1: Manufacturer: syz
[  215.927268][ T4365] usb 3-1: SerialNumber: syz
[  215.996273][ T4365] zaurus: probe of 3-1:1.0 failed with error -22
[  216.452535][T13153] loop3: detected capacity change from 0 to 4096
[  216.511938][    C1] sd 0:0:1:0: tag#1606 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  216.521891][    C1] sd 0:0:1:0: tag#1606 CDB: Mode Sense(10)
[  216.527759][    C1] sd 0:0:1:0: tag#1606 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e
[  216.536938][    C1] sd 0:0:1:0: tag#1606 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30
[  216.546280][    C1] sd 0:0:1:0: tag#1606 CDB[20]: 8b 52 18
[  216.555540][T13169] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  216.610000][T13153] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  216.645702][T13174] SET target dimension over the limit!
[  216.770681][T13153] ntfs3: loop3: failed to convert "c46c" to iso8859-15
[  217.142269][T13200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.261153][ T6052] usb 3-1: USB disconnect, device number 19
[  217.304664][ T4542] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  217.324258][T13214] netlink: 'syz.4.3943': attribute type 21 has an invalid length.
[  217.351377][T13214] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3943'.
[  217.367240][T13214] netlink: 'syz.4.3943': attribute type 5 has an invalid length.
[  217.380011][T13214] netlink: 'syz.4.3943': attribute type 6 has an invalid length.
[  217.391318][T13214] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3943'.
[  217.446417][T13217] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  217.724968][ T4542] usb 6-1: unable to get BOS descriptor or descriptor too short
[  217.764911][ T4542] usb 6-1: not running at top speed; connect to a high speed hub
[  217.848284][ T4542] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.887855][ T4542] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  217.887904][ T4542] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  218.044951][ T4542] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  218.075309][ T4542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.105002][ T4542] usb 6-1: Product: syz
[  218.109197][ T4542] usb 6-1: Manufacturer: syz
[  218.113795][ T4542] usb 6-1: SerialNumber: syz
[  218.408887][   T26] audit: type=1107 audit(1787660095.000:23): pid=13294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  218.584700][ T6052] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  218.613863][ T4542] usb 6-1: USB disconnect, device number 6
[  218.671553][    C0] vkms_vblank_simulate: vblank timer overrun
[  218.806689][T13332] netlink: 'syz.0.3982': attribute type 21 has an invalid length.
[  218.830886][T13332] __nla_validate_parse: 1 callbacks suppressed
[  218.830901][T13332] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3982'.
[  218.855049][T13332] netlink: 'syz.0.3982': attribute type 1 has an invalid length.
[  218.862809][T13332] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3982'.
[  218.922415][T13291] loop4: detected capacity change from 0 to 32768
[  218.984646][ T6052] usb 3-1: Using ep0 maxpacket: 8
[  219.004678][ T4548] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  219.101804][ T9080] udevd[9080]: incorrect btrfs checksum on /dev/loop4
[  219.220369][T13367] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3990'.
[  219.238506][T13369] loop5: detected capacity change from 0 to 512
[  219.244701][ T4548] usb 4-1: Using ep0 maxpacket: 8
[  219.261031][T13367] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3990'.
[  219.300500][ T6052] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  219.310570][ T6052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.352546][ T6052] usb 3-1: Product: syz
[  219.364929][ T4548] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  219.370553][ T6052] usb 3-1: Manufacturer: 픷쓴绂競⩛댚此䡙ㄨ�옗뉓ᡥ௤榭駖ꈣ赩㌦￳ῃǥ�잌�垌込纫৔䌿ｰ屒뤰ꂗ䢢耪ꮦ䤭蜿�嶈↮ᠭ雮⼌ⶲ콊풗᯴꩑蟙䓒◦㽄䢪䧨�红宕峓⑫쎎Ꙍ觤跔鉈ꓢ櫦ᒡ�𢢣
[  219.373157][ T4548] usb 4-1: config 0 has no interface number 0
[  219.404002][ T4548] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  219.418178][ T4548] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  219.423789][T13369] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  219.429444][ T4548] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping
[  219.429472][ T4548] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  219.499478][T13369] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.578040][ T6052] usb 3-1: SerialNumber: syz
[  219.581800][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3998'.
[  219.594351][T13369] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz.5.3991: Directory hole found for htree leaf block 0
[  219.594519][ T4548] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  219.620229][T13369] EXT4-fs (loop5): Remounting filesystem read-only
[  219.640178][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.661964][ T4548] usb 4-1: Product: syz
[  219.681163][ T4548] usb 4-1: Manufacturer: syz
[  219.691725][ T4548] usb 4-1: SerialNumber: syz
[  219.723934][ T4548] usb 4-1: config 0 descriptor??
[  219.776284][ T4548] iowarrior 4-1:0.186: no interrupt-in endpoint found
[  219.894920][ T6052] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  219.924374][ T6052] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  219.971419][T13432] netlink: 'syz.0.4008': attribute type 6 has an invalid length.
[  220.007979][ T6052] usb 3-1: USB disconnect, device number 20
[  220.049190][T13432] netlink: 'syz.0.4008': attribute type 7 has an invalid length.
[  220.090410][T13432] netlink: 'syz.0.4008': attribute type 8 has an invalid length.
[  220.276601][T13474] loop0: detected capacity change from 0 to 512
[  220.292280][ T4443] udevd[4443]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.338213][T13483] netlink: 'syz.4.4018': attribute type 3 has an invalid length.
[  220.446479][T13474] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  220.458615][T13474] ext4 filesystem being mounted at /868/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  220.607680][T13508] netlink: 'syz.4.4025': attribute type 16 has an invalid length.
[  220.639369][T13508] netlink: 'syz.4.4025': attribute type 17 has an invalid length.
[  220.701332][T13508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  220.737073][T13519] loop2: detected capacity change from 0 to 512
[  220.738704][T13508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  220.808423][T13508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  220.894249][T13519] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  220.910586][T13508] device sit0 left promiscuous mode
[  220.925058][T13519] ext4 filesystem being mounted at /778/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.955540][T13519] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.4029: Directory hole found for htree leaf block 0
[  220.987711][T13519] EXT4-fs (loop2): Remounting filesystem read-only
[  221.028741][T13508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  221.065313][T13508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  221.080123][T13508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  221.090716][T13508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.261208][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4039'.
[  221.276062][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4039'.
[  221.443047][T13571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.561818][ T5658] usb 4-1: USB disconnect, device number 22
[  221.863162][T13610] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.4056'.
[  221.968793][T13628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4063'.
[  222.162103][T13654] netlink: 'syz.3.4071': attribute type 1 has an invalid length.
[  222.210313][T13654] netlink: 'syz.3.4071': attribute type 2 has an invalid length.
[  222.245082][T13654] netlink: 'syz.3.4071': attribute type 2 has an invalid length.
[  222.263146][T13654] netlink: 'syz.3.4071': attribute type 2 has an invalid length.
[  222.277048][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4071'.
[  222.594277][T13717] device geneve2 entered promiscuous mode
[  222.652000][T13727] netlink: 'syz.0.4090': attribute type 1 has an invalid length.
[  222.698222][T13712] loop3: detected capacity change from 0 to 8192
[  222.723271][T13732] loop2: detected capacity change from 0 to 1024
[  222.791540][T13712] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  222.820722][T13712] REISERFS (device loop3): using ordered data mode
[  222.848647][T13732] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,discard,barrier=0x000000002cb525b5,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none.
[  222.872132][T13712] reiserfs: using flush barriers
[  222.873327][T13712] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  222.923310][T13758] loop4: detected capacity change from 0 to 512
[  222.936662][T13712] REISERFS (device loop3): checking transaction log (loop3)
[  222.977264][T13712] REISERFS (device loop3): Using r5 hash to sort names
[  222.994691][T13712] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  223.053304][T13758] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  223.096178][T13758] ext4 filesystem being mounted at /786/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  223.839401][ T6052] kernel write not supported for file /1786/net/rt_acct (pid: 6052 comm: kworker/0:20)
[  223.925484][T13786] ceph: Unknown parameter 'port'
[  224.028932][T13801] loop4: detected capacity change from 0 to 512
[  224.100227][T13801] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  224.127095][T13801] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  224.131326][T13799] loop2: detected capacity change from 0 to 4096
[  224.165742][T13801] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.4111: bad orphan inode 131083
[  224.182534][T13813] xt_CT: No such helper "syz0"
[  224.200196][T13801] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none.
[  224.414950][T13801] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.4111: Logical block already allocated
[  225.010947][T13911] __nla_validate_parse: 2 callbacks suppressed
[  225.010962][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4147'.
[  225.079071][T13911] device dummy1 entered promiscuous mode
[  225.144860][T13932] block nbd4: NBD_DISCONNECT
[  225.245432][T13945] CIFS mount error: No usable UNC path provided in device string!
[  225.245432][T13945] 
[  225.305982][T13945] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  225.338023][T13956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  225.361727][T13957] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  225.363431][T13962] loop5: detected capacity change from 0 to 8
[  225.377725][T13957] overlayfs: bad mount option "redirect_dir=nofollow\"
[  225.702223][T14008] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4174'.
[  225.758636][T14013] validate_nla: 4 callbacks suppressed
[  225.758651][T14013] netlink: 'syz.3.4176': attribute type 2 has an invalid length.
[  225.875953][ T6052] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  225.894869][ T2299] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  226.174698][ T6052] usb 5-1: Using ep0 maxpacket: 8
[  226.303932][T14037] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.4184'.
[  226.319511][ T6052] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  226.334988][ T6052] usb 5-1: config 179 has no interface number 0
[  226.345147][ T2299] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  226.373281][ T2299] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  226.393112][ T6052] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  226.437666][ T2299] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  226.478606][ T6052] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  226.539943][ T2299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.571028][ T6052] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  226.646242][ T6052] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  226.659754][ T2299] pl2303 3-1:1.0: required endpoints missing
[  226.687515][ T2299] pl2303 3-1:1.1: pl2303 converter detected
[  226.734644][ T6052] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  226.749547][ T2299] usb 3-1: pl2303 converter now attached to ttyUSB0
[  226.756320][T14068] SET target dimension over the limit!
[  226.786088][ T6052] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  226.810664][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.855842][T13988] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  226.919061][T14085] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  226.941945][T14085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  226.963693][T14085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  227.293822][T14115] IPVS: set_ctl: invalid protocol: 135 172.20.20.50:20000
[  227.350305][ T5606] usb 5-1: USB disconnect, device number 21
[  227.374628][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  227.403929][ T6052] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  227.554061][T14144] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  227.613041][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4206'.
[  227.724708][ T6052] usb 1-1: Using ep0 maxpacket: 32
[  227.914902][ T6052] usb 1-1: unable to get BOS descriptor or descriptor too short
[  227.923125][ T5606] usb 3-1: USB disconnect, device number 21
[  227.946700][T14186] loop4: detected capacity change from 0 to 8
[  227.954169][ T5606] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  227.976201][ T5606] pl2303 3-1:1.1: device disconnected
[  228.005803][ T6052] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  228.144798][ T4547] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  228.168543][T14206] device gre1 entered promiscuous mode
[  228.215433][ T6052] usb 1-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  228.234212][ T6052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.243392][ T6052] usb 1-1: Product: syz
[  228.248558][ T6052] usb 1-1: Manufacturer: syz
[  228.259741][ T6052] usb 1-1: SerialNumber: syz
[  228.296237][T14101] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  228.369121][T14228] xt_HMARK: spi-set and port-set can't be combined
[  228.444822][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4225'.
[  228.483722][T14235] 8021q: adding VLAN 0 to HW filter on device batadv1
[  228.506062][ T4547] usb 6-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping
[  228.524015][T14237] loop3: detected capacity change from 0 to 4096
[  228.535909][T14237] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  228.578733][T14237] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1f, max_cluster = 0x0
[  228.614862][T14237] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  228.638286][T14237] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  228.640019][ T4547] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  228.659339][T14237] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  228.683176][ T4547] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  228.701006][ T6052] usb 1-1: MIDIStreaming interface descriptor not found
[  228.724656][ T4547] usb 6-1: Manufacturer: syz
[  228.732939][ T4547] usb 6-1: SerialNumber: syz
[  228.776313][T14268] overlayfs: conflicting options: metacopy=on,redirect_dir=off
[  228.801978][T14237] ntfs: volume version 3.1.
[  228.817272][ T6052] usb 1-1: USB disconnect, device number 19
[  229.103178][ T4547] usbhid 6-1:36.0: couldn't find an input interrupt endpoint
[  229.136344][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.159400][ T4547] usb 6-1: USB disconnect, device number 7
[  229.312223][T14313] loop2: detected capacity change from 0 to 4096
[  229.354993][T14313] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  229.384815][T14313] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  229.415951][T14313] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  229.453229][T14313] ntfs: volume version 3.1.
[  229.789932][T14338] netlink: 'syz.3.4246': attribute type 21 has an invalid length.
[  229.830016][ T4195] ntfs: (device loop2): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  229.853865][T14338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4246'.
[  230.078388][T14367] loop3: detected capacity change from 0 to 512
[  230.094743][ T2299] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  230.152624][T14375] netlink: 'syz.2.4256': attribute type 32 has an invalid length.
[  230.375968][ T2299] usb 6-1: Using ep0 maxpacket: 32
[  230.474426][T14400] loop3: detected capacity change from 0 to 1024
[  230.497241][T14400] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  230.510718][ T2299] usb 6-1: config 1 has an invalid interface number: 216 but max is 0
[  230.519412][ T2299] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.530891][ T2299] usb 6-1: config 1 has no interface number 0
[  230.541013][ T2299] usb 6-1: config 1 interface 216 has no altsetting 0
[  230.706443][ T2299] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee
[  230.725279][ T2299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.738906][ T2299] usb 6-1: Product: syz
[  230.743237][ T2299] usb 6-1: Manufacturer: syz
[  230.749148][ T2299] usb 6-1: SerialNumber: syz
[  230.834636][ T5658] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  231.094055][ T2299] usb 6-1: USB disconnect, device number 8
[  231.255330][ T5658] usb 4-1: config 0 has an invalid interface number: 207 but max is 0
[  231.263545][ T5658] usb 4-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config
[  231.322231][T14412] loop4: detected capacity change from 0 to 1024
[  231.335048][ T5658] usb 4-1: config 0 has no interface number 0
[  231.419372][T14412] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  231.516049][ T5658] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  231.529365][T14412] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,dioread_nolock,nombcache,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none.
[  231.552831][    C0] vkms_vblank_simulate: vblank timer overrun
[  231.605653][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.631940][T14439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4271'.
[  231.646380][ T5658] usb 4-1: Product: syz
[  231.650626][ T5658] usb 4-1: Manufacturer: syz
[  231.672669][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4271'.
[  231.682544][ T5658] usb 4-1: SerialNumber: syz
[  231.721965][ T5658] usb 4-1: config 0 descriptor??
[  231.893449][T14470] netlink: 'syz.4.4281': attribute type 49 has an invalid length.
[  232.004951][ T5658] qmi_wwan: probe of 4-1:0.207 failed with error -22
[  232.038404][ T5658] usb 4-1: USB disconnect, device number 23
[  232.044016][T14481] MTDSB: Device #1 doesn't appear to exist
[  232.044016][T14481] 
[  232.163254][T14497] program syz.0.4287 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.404840][ T6052] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  232.427501][T14515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4293'.
[  232.475870][T14458] loop2: detected capacity change from 0 to 32768
[  232.684732][ T6052] usb 5-1: Using ep0 maxpacket: 8
[  232.991611][ T6052] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  233.036547][ T6052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.071318][ T6052] usb 5-1: Product: syz
[  233.084496][ T6052] usb 5-1: Manufacturer: syz
[  233.106502][ T6052] usb 5-1: SerialNumber: syz
[  233.150758][ T6052] usb 5-1: config 0 descriptor??
[  233.226556][ T6052] gspca_main: se401-2.14.0 probing 047d:5003
[  233.450033][T14595] loop5: detected capacity change from 0 to 1024
[  233.557639][T14525] loop0: detected capacity change from 0 to 40427
[  233.665684][ T6052] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  233.673098][ T6052] se401: probe of 5-1:0.0 failed with error -71
[  233.679030][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4324'.
[  233.725126][ T6052] usb 5-1: USB disconnect, device number 22
[  233.793310][T14525] F2FS-fs (loop0): Found nat_bits in checkpoint
[  233.829620][T14629] nfs: Deprecated parameter 'nointr'
[  233.993730][T14525] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  234.278613][ T4190] attempt to access beyond end of device
[  234.278613][ T4190] loop0: rw=2049, want=45104, limit=40427
[  234.835012][ T6052] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  234.992587][T14657] loop4: detected capacity change from 0 to 32768
[  235.104706][ T6052] usb 4-1: Using ep0 maxpacket: 8
[  235.113108][T14657] 
[  235.113108][T14657]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  235.113108][T14657] 
[  235.245592][  T144] 
[  235.245592][  T144]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  235.245592][  T144] 
[  235.265204][T14729] loop5: detected capacity change from 0 to 64
[  235.289756][  T144] 
[  235.289756][  T144]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  235.289756][  T144] 
[  235.337529][  T276] 
[  235.337529][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  235.337529][  T276] 
[  235.372364][ T4192] 
[  235.372364][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  235.372364][ T4192] 
[  235.395692][ T4192] 
[  235.395692][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  235.395692][ T4192] 
[  235.410610][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4362'.
[  235.429691][ T5661] kernel write not supported for file /input/mice (pid: 5661 comm: kworker/0:17)
[  235.441086][ T6052] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  235.455784][ T6052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  235.478227][ T6052] usb 4-1: Product: syz
[  235.493534][ T6052] usb 4-1: Manufacturer: syz
[  235.505106][ T6052] usb 4-1: SerialNumber: syz
[  235.543699][ T6052] usb 4-1: config 0 descriptor??
[  235.544686][T14748] syz.4.4359 (14748): /proc/14745/oom_adj is deprecated, please use /proc/14745/oom_score_adj instead.
[  235.599178][ T6052] gspca_main: sq905-2.14.0 probing 2770:9120
[  236.040816][ T6052] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  236.053031][ T6052] sq905: probe of 4-1:0.0 failed with error -71
[  236.093122][ T6052] usb 4-1: USB disconnect, device number 24
[  236.111213][T14802] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4378'.
[  236.182099][T14802] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  236.204052][T14811] loop2: detected capacity change from 0 to 256
[  236.706587][T14868] loop2: detected capacity change from 0 to 64
[  236.716735][T14859] loop3: detected capacity change from 0 to 1764
[  236.838111][T14868] attempt to access beyond end of device
[  236.838111][T14868] loop2: rw=0, want=1026, limit=64
[  236.870689][T14868] Buffer I/O error on dev loop2, logical block 512, async page read
[  236.893654][T14868] attempt to access beyond end of device
[  236.893654][T14868] loop2: rw=0, want=113154, limit=64
[  236.924807][T14868] Buffer I/O error on dev loop2, logical block 56576, async page read
[  237.064973][ T6052] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  237.178375][T14923] loop3: detected capacity change from 0 to 256
[  237.235181][T14923] exfat: Deprecated parameter 'namecase'
[  237.244915][T14923] exfat: Deprecated parameter 'namecase'
[  237.279238][T14923] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  237.354728][ T6052] usb 5-1: Using ep0 maxpacket: 8
[  237.494808][ T6052] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.525938][ T6052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  237.617162][T14978] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.663648][T14978] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.687868][T14978] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.700205][T14984] loop2: detected capacity change from 0 to 1764
[  237.707026][T14978] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.724894][ T6052] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  237.745536][ T6052] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  237.753949][ T6052] usb 5-1: Product: syz
[  237.764728][ T4548] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  237.769197][ T6052] usb 5-1: Manufacturer: syz
[  237.777377][ T6052] usb 5-1: SerialNumber: syz
[  237.818919][ T6052] usb 5-1: config 0 descriptor??
[  237.884789][ T4542] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  237.886483][ T6052] imon_raw 5-1:0.0: IR endpoint missing
[  237.978929][T14996] overlayfs: missing 'lowerdir'
[  238.015698][ T4548] usb 1-1: Using ep0 maxpacket: 8
[  238.103621][ T6052] usb 5-1: USB disconnect, device number 23
[  238.137745][ T4548] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.168959][ T4548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  238.181543][ T4548] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  238.199855][ T4548] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  238.201370][T15016] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3)
[  238.209433][ T4548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.234992][ T4548] usb 1-1: config 0 descriptor??
[  238.245628][ T4542] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  238.253861][ T4542] usb 6-1: config 0 has no interface number 0
[  238.266864][ T4542] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  238.444918][ T4542] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  238.453993][ T4542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.462179][ T4548] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  238.469854][ T4542] usb 6-1: Product: syz
[  238.474145][ T4542] usb 6-1: Manufacturer: syz
[  238.478851][ T4542] usb 6-1: SerialNumber: syz
[  238.485570][ T4542] usb 6-1: config 0 descriptor??
[  238.508591][ T6052] usb 1-1: USB disconnect, device number 20
[  238.533491][ T4542] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  238.628174][T15052] loop2: detected capacity change from 0 to 22
[  238.673784][T15057] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4445'.
[  238.684951][T15052] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  238.708875][T15052] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  238.804680][    C1] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  238.824875][ T4548] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.850239][ T4548] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  238.881593][ T4548] usb 4-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00
[  238.907707][ T4548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.997252][ T6052] usb 6-1: USB disconnect, device number 9
[  239.036303][ T6052] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  239.081951][T15100] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4454'.
[  239.204864][ T4548] usb 4-1: dvb_usb_v2: 2nd usb_bulk_msg() failed=-22
[  239.212473][ T4548] dvb_usb_af9035: probe of 4-1:1.0 failed with error -22
[  239.429104][ T4542] usb 4-1: USB disconnect, device number 25
[  239.554943][ T4548] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  239.639467][T15156] loop2: detected capacity change from 0 to 8
[  239.811301][ T4548] usb 1-1: Using ep0 maxpacket: 32
[  239.936538][ T4548] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.963616][ T4548] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.106423][ T4548] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  240.133647][ T4548] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  240.152644][ T4548] usb 1-1: Product: syz
[  240.161282][ T4548] usb 1-1: Manufacturer: syz
[  240.166221][ T4542] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  240.211435][  T150] block nbd4: Attempted send on invalid socket
[  240.217949][  T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  240.222042][T15203] loop5: detected capacity change from 0 to 4096
[  240.235986][T15208] hpfs: hpfs_map_sector(): read error
[  240.248532][ T4548] hub 1-1:4.0: USB hub found
[  240.404164][T15203] NILFS (loop5): invalid segment: Checksum error in segment payload
[  240.430716][T15203] NILFS (loop5): trying rollback from an earlier position
[  240.469144][ T4548] hub 1-1:4.0: config failed, hub has too many ports! (err -19)
[  240.486912][T15235] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4485'.
[  240.513577][T15203] NILFS (loop5): recovery complete
[  240.528287][ T4542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.559174][ T4542] usb 3-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  240.596524][T15238] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.620700][ T4542] usb 3-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.646840][ T4542] usb 3-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  240.722069][ T4542] usb 3-1: config 0 interface 0 has no altsetting 0
[  240.780984][T15254] usb usb8: usbfs: process 15254 (syz.4.4490) did not claim interface 32 before use
[  240.827193][ T4542] usb 3-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00
[  240.852090][ T4542] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[  240.890689][ T4542] usb 3-1: Manufacturer: syz
[  240.903561][ T4365] usb 1-1: USB disconnect, device number 21
[  240.915312][ T4542] usb 3-1: config 0 descriptor??
[  240.976782][T15271] netlink: 'syz.3.4495': attribute type 1 has an invalid length.
[  241.034752][T15271] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4495'.
[  241.123838][T15288] openvswitch: netlink: EtherType 0 is less than min 600
[  241.212516][ T4365] usb 3-1: USB disconnect, device number 22
[  241.293339][T15299] netlink: 'syz.4.4501': attribute type 10 has an invalid length.
[  241.343993][T15315] loop0: detected capacity change from 0 to 2048
[  241.528099][T15335] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4508'.
[  241.632370][T15340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4511'.
[  241.635627][T15342] netlink: 'syz.0.4510': attribute type 10 has an invalid length.
[  241.652268][T15340] openvswitch: netlink: Missing key (keys=40, expected=100)
[  241.684857][ T4365] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  241.760150][T15342] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.795862][T15342] team0: Port device bond0 added
[  242.162800][T15397] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  242.182322][T15398] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 1
[  242.208648][T15400] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 2
[  242.218737][ T4365] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  242.228498][T15403] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 3
[  242.245343][ T4365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.264232][ T4365] usb 6-1: Product: syz
[  242.274665][ T4365] usb 6-1: Manufacturer: syz
[  242.296885][ T4365] usb 6-1: SerialNumber: syz
[  242.305022][ T4548] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  242.439742][T15428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4536'.
[  242.455212][T15428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4536'.
[  242.527736][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4539'.
[  242.560355][ T4548] usb 4-1: Using ep0 maxpacket: 16
[  242.563156][T15441] loop4: detected capacity change from 0 to 256
[  242.705545][ T5661] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  242.848223][ T4548] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  242.863281][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.878298][ T4548] usb 4-1: Product: syz
[  242.882834][ T4548] usb 4-1: Manufacturer: syz
[  242.903082][ T4548] usb 4-1: SerialNumber: syz
[  242.903457][T15473] loop4: detected capacity change from 0 to 256
[  242.913782][ T4548] usb 4-1: config 0 descriptor??
[  242.929265][ T4365] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  242.952773][T15478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4551'.
[  242.974759][ T5661] usb 3-1: Using ep0 maxpacket: 8
[  242.986367][T15473] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  243.105002][ T5661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  243.127349][ T5661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  243.147691][ T5661] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  243.158975][ T5661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  243.202484][ T5661] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  243.204849][ T4548] usb 4-1: ignoring: not an USB2CAN converter
[  243.230090][ T5661] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  243.250926][ T5661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.257177][T15497] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2
[  243.270839][ T5661] usb 3-1: config 0 descriptor??
[  243.278280][T15499] loop4: detected capacity change from 0 to 764
[  243.284855][T15497] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€
[  243.333703][ T4189] Bluetooth: hci5: urb ffff888019da2300 submission failed (90)
[  243.358146][ T5661] usb 6-1: USB disconnect, device number 10
[  243.411166][ T6052] usb 4-1: USB disconnect, device number 26
[  243.543980][ T4544] usb 3-1: USB disconnect, device number 23
[  243.985763][ T4542] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  244.028312][T15567] loop3: detected capacity change from 0 to 256
[  244.192055][T15575] __nla_validate_parse: 1 callbacks suppressed
[  244.192072][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4574'.
[  244.215005][ T4365] usb 6-1: Service connection timeout for: 256
[  244.215106][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4574'.
[  244.221209][ T4365] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  244.221938][ T4365] ath9k_htc: Failed to initialize the device
[  244.251971][ T5661] usb 6-1: ath9k_htc: USB layer deinitialized
[  244.369592][ T4542] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 16630, setting to 1024
[  244.477373][   T26] audit: type=1800 audit(1787660121.070:24): pid=15583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.4576" name="/" dev="tmpfs" ino=132 res=0 errno=0
[  244.544907][T15611] netlink: 'syz.0.4582': attribute type 6 has an invalid length.
[  244.545924][ T4542] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  244.579619][ T4542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.614946][ T4542] usb 5-1: Product: syz
[  244.622951][ T4542] usb 5-1: Manufacturer: syz
[  244.643273][ T4542] usb 5-1: SerialNumber: syz
[  244.673352][T15625] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4587'.
[  244.674801][ T5661] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  244.683645][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4587'.
[  244.703620][ T4542] ums-onetouch 5-1:1.0: USB Mass Storage device detected
[  244.730477][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4587'.
[  244.740732][ T4542] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19
[  244.752771][T15625] netlink: 'syz.3.4587': attribute type 8 has an invalid length.
[  244.790864][ T4542] scsi host1: usb-storage 5-1:1.0
[  244.989521][ T5658] usb 5-1: USB disconnect, device number 24
[  245.110515][ T5661] usb 6-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  245.221572][T15693] loop3: detected capacity change from 0 to 256
[  245.228538][ T5661] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  245.253783][ T5661] usb 6-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0
[  245.271404][ T5661] usb 6-1: Product: syz
[  245.304971][T15563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  245.336970][ T5661] usbhid 6-1:15.0: fixing wrong optional hid class descriptors count
[  245.362341][ T5661] usbhid 6-1:15.0: can't add hid device: -22
[  245.399441][ T5661] usbhid: probe of 6-1:15.0 failed with error -22
[  245.608909][ T6052] usb 6-1: USB disconnect, device number 11
[  245.618771][ T5661] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  245.714648][ T4365] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  245.805444][T15743] xt_cgroup: path and classid specified
[  245.978525][T15761] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4621'.
[  246.011642][T15764] syz.4.4622 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  246.049343][ T5661] usb 1-1: config 0 has an invalid interface number: 83 but max is 0
[  246.058036][ T5658] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  246.075917][ T5661] usb 1-1: config 0 has no interface number 0
[  246.087487][ T5661] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4
[  246.111833][ T5661] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 246, setting to 64
[  246.145114][ T4365] usb 4-1: unable to get BOS descriptor or descriptor too short
[  246.224814][ T4365] usb 4-1: config 3 has an invalid interface number: 151 but max is 0
[  246.239746][ T4365] usb 4-1: config 3 has no interface number 0
[  246.253064][ T4365] usb 4-1: config 3 interface 151 has no altsetting 0
[  246.325202][ T5661] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  246.334290][ T5661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.371335][ T5661] usb 1-1: Product: syz
[  246.375833][ T5661] usb 1-1: Manufacturer: syz
[  246.381417][ T5661] usb 1-1: SerialNumber: syz
[  246.405272][ T5661] usb 1-1: config 0 descriptor??
[  246.414935][ T4365] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=1d.cd
[  246.425132][T15702] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  246.438229][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.447520][ T4365] usb 4-1: Product: syz
[  246.451701][ T4365] usb 4-1: Manufacturer: syz
[  246.456596][ T5661] redrat3 1-1:0.83: Couldn't find all endpoints
[  246.457204][ T4365] usb 4-1: SerialNumber: syz
[  246.520915][T15810] loop4: detected capacity change from 0 to 8
[  246.537926][ T5658] usb 3-1: unable to get BOS descriptor or descriptor too short
[  246.557941][T15810] SQUASHFS error: zlib decompression failed, data probably corrupt
[  246.574952][T15810] SQUASHFS error: Failed to read block 0x9b: -5
[  246.584147][T15810] SQUASHFS error: Unable to read metadata cache entry [99]
[  246.592044][T15810] SQUASHFS error: Unable to read inode 0x127
[  246.644985][ T5658] usb 3-1: config 8 has an invalid interface number: 92 but max is 0
[  246.653099][ T5658] usb 3-1: config 8 has no interface number 0
[  246.659275][ T5658] usb 3-1: config 8 interface 92 altsetting 65 endpoint 0x6 has invalid wMaxPacketSize 0
[  246.684874][ T5658] usb 3-1: config 8 interface 92 has no altsetting 0
[  246.692023][ T5661] usb 1-1: USB disconnect, device number 22
[  246.713118][T15797] loop5: detected capacity change from 0 to 32768
[  246.755851][T15797] XFS: attr2 mount option is deprecated.
[  246.761959][T15797] XFS (loop5): invalid log iosize: 0 [not 12-30]
[  246.819587][ T4365] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.151/input/input20
[  246.864980][ T3544] bcm5974 4-1:3.151: could not read from device
[  246.911137][ T4365] usb 4-1: USB disconnect, device number 27
[  246.924931][ T3544] bcm5974 4-1:3.151: could not read from device
[  246.934598][T15833] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4640'.
[  246.984890][T15843] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4642'.
[  246.996605][ T5658] usb 3-1: string descriptor 0 read error: -22
[  247.002861][ T5658] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0181, bcdDevice= b.f6
[  247.021567][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.095871][ T5658] ftdi_sio 3-1:8.92: FTDI USB Serial Device converter detected
[  247.118941][ T5658] usb 3-1: Detected FT232H
[  247.123408][ T5658] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6
[  247.196999][T15864] netlink: 'syz.5.4646': attribute type 21 has an invalid length.
[  247.314774][ T5658] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  247.347791][ T5658] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  247.395070][ T5658] ftdi_sio 3-1:8.92: GPIO initialisation failed: -71
[  247.424940][ T5658] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  247.467896][ T5658] usb 3-1: USB disconnect, device number 24
[  247.523457][ T5658] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  247.569250][ T5658] ftdi_sio 3-1:8.92: device disconnected
[  247.575228][T15899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4656'.
[  247.689969][T15920] dlm: dev_write: no op 0 74000000000000
[  247.911682][T15948] loop4: detected capacity change from 0 to 256
[  248.229908][T15977] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4677'.
[  248.301604][ T6052] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  248.313591][T15977] device bond_slave_0 entered promiscuous mode
[  248.320546][T15977] device bond_slave_1 entered promiscuous mode
[  248.430192][T15989] loop3: detected capacity change from 0 to 256
[  248.495311][T15989] exfat: Deprecated parameter 'namecase'
[  248.501081][T15989] exfat: Deprecated parameter 'namecase'
[  248.581376][T15989] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[  248.705114][ T6052] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.725460][ T6052] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  248.737892][ T6052] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  248.747737][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.787925][ T6052] usb 1-1: config 0 descriptor??
[  249.011434][T16047] x_tables: duplicate underflow at hook 4
[  249.054873][ T6052] Bluetooth: Can't get state to change to load ram patch err
[  249.062298][ T6052] Bluetooth: Loading patch file failed
[  249.091347][ T6052] ath3k: probe of 1-1:0.0 failed with error -121
[  249.098852][ T5658] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  249.142346][T16060] loop3: detected capacity change from 0 to 64
[  249.241246][T16068] __nla_validate_parse: 1 callbacks suppressed
[  249.241261][T16068] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4705'.
[  249.275125][ T5661] usb 1-1: USB disconnect, device number 23
[  249.285155][ T6052] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  249.384723][ T5658] usb 3-1: Using ep0 maxpacket: 8
[  249.504762][T16100] IPv6: NLM_F_CREATE should be specified when creating new route
[  249.518507][ T5658] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[  249.534864][ T5658] usb 3-1: config 0 has no interface number 0
[  249.551252][ T5658] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  249.579352][ T5658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.614027][ T5658] usb 3-1: config 0 descriptor??
[  249.621837][T16109] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4717'.
[  249.686298][ T5658] usb-storage 3-1:0.32: USB Mass Storage device detected
[  249.705052][ T6052] usb 6-1: config 0 has an invalid interface number: 11 but max is 0
[  249.713359][ T6052] usb 6-1: config 0 has no interface number 0
[  249.721409][ T5658] usb-storage 3-1:0.32: device ignored
[  249.727283][ T6052] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11
[  249.739322][ T6052] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0
[  249.749983][ T6052] usb 6-1: config 0 interface 11 altsetting 253 bulk endpoint 0x87 has invalid maxpacket 0
[  249.772869][ T6052] usb 6-1: config 0 interface 11 has no altsetting 0
[  249.782216][ T6052] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  249.813395][ T6052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.835543][ T6052] usb 6-1: config 0 descriptor??
[  249.885979][ T6052] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected
[  249.937010][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81
[  249.953493][T16136] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  249.974111][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82
[  250.003884][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1
[  250.020420][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2
[  250.038411][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85
[  250.048646][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5
[  250.103330][ T6052] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  250.120521][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83
[  250.136516][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84
[  250.144322][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3
[  250.153782][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4
[  250.175914][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86
[  250.188815][ T6052] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6
[  250.206249][ T6052] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  250.231848][ T6052] usb 6-1: USB disconnect, device number 12
[  250.264524][ T6052] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  250.313113][ T5658] usb 3-1: USB disconnect, device number 25
[  250.327025][ T6052] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  250.346558][T16177] loop3: detected capacity change from 0 to 1764
[  250.368364][ T6052] keyspan 6-1:0.11: device disconnected
[  250.512531][T16203] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.646090][T16218] xt_time: unknown flags 0x4
[  250.817101][T16229] loop0: detected capacity change from 0 to 2048
[  250.870723][T16229] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  250.959151][T16256] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.959533][T16229] attempt to access beyond end of device
[  250.959533][T16229] loop0: rw=524288, want=33554432, limit=2048
[  251.236796][T16229] attempt to access beyond end of device
[  251.236796][T16229] loop0: rw=0, want=33554432, limit=2048
[  251.295105][T16229] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3)
[  251.320244][T16285] loop3: detected capacity change from 0 to 1024
[  251.491659][T16285] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  251.961792][T16371] netlink: 'syz.4.4787': attribute type 1 has an invalid length.
[  252.002272][T16362] nvme_fabrics: missing parameter 'nqn=%s'
[  252.043772][T16382] netlink: 'syz.2.4790': attribute type 2 has an invalid length.
[  252.086061][T16382] netlink: 'syz.2.4790': attribute type 1 has an invalid length.
[  252.265959][T16407] loop5: detected capacity change from 0 to 256
[  252.447886][ T6052] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  252.649991][T16441] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  252.664882][ T5658] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  252.798039][T16456] loop0: detected capacity change from 0 to 256
[  252.820679][T16458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4814'.
[  252.831764][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4814'.
[  252.844872][ T6052] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  252.850409][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4814'.
[  252.885428][T16456] exfat: Deprecated parameter 'utf8'
[  252.890797][T16456] exfat: Deprecated parameter 'utf8'
[  252.930649][T16456] exfat: Deprecated parameter 'utf8'
[  252.950867][T16456] exfat: Deprecated parameter 'codepage'
[  252.964979][T16456] exfat: Bad value for 'codepage'
[  253.006543][T16476] x_tables: unsorted underflow at hook 2
[  253.044881][ T6052] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  253.053969][ T6052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.094933][ T5658] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.106296][ T6052] usb 5-1: Product: syz
[  253.110484][ T6052] usb 5-1: Manufacturer: syz
[  253.123451][ T5658] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  253.148296][ T6052] usb 5-1: SerialNumber: syz
[  253.335088][ T5658] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  253.344205][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.390496][ T5658] usb 4-1: Product: syz
[  253.399668][ T5658] usb 4-1: Manufacturer: syz
[  253.404341][ T5658] usb 4-1: SerialNumber: syz
[  253.425258][ T6052] usb 5-1: Unknown endpoint type found, address 0x03
[  253.444730][ T6052] usb 5-1: Not enough endpoints found in device, aborting!
[  253.505881][ T5658] cdc_ncm 4-1:1.0: skipping garbage
[  253.511934][ T5658] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing
[  253.534800][ T5658] cdc_ncm 4-1:1.0: bind() failure
[  253.553155][ T5658] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  253.574450][ T5658] cdc_ncm 4-1:1.1: bind() failure
[  253.692980][ T5606] usb 5-1: USB disconnect, device number 25
[  253.757014][ T4542] usb 4-1: USB disconnect, device number 28
[  254.250038][T16602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4857'.
[  254.384808][ T4365] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  254.430230][T16615] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.4862'.
[  254.697600][T16650] netlink: 'syz.2.4873': attribute type 1 has an invalid length.
[  254.723299][T16650] netlink: 'syz.2.4873': attribute type 3 has an invalid length.
[  254.750652][T16658] syz.3.4876: vmalloc error: size 70368744177852, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  254.781279][T16650] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4873'.
[  254.790853][ T4365] usb 1-1: unable to get BOS descriptor or descriptor too short
[  254.822372][T16658] CPU: 0 PID: 16658 Comm: syz.3.4876 Not tainted syzkaller #0
[  254.829883][T16658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  254.839960][T16658] Call Trace:
[  254.843250][T16658]  <TASK>
[  254.844825][ T4365] usb 1-1: not running at top speed; connect to a high speed hub
[  254.846185][T16658]  dump_stack_lvl+0x188/0x250
[  254.858574][T16658]  ? rcu_lock_release+0x5/0x20
[  254.863356][T16658]  ? show_regs_print_info+0x20/0x20
[  254.868573][T16658]  ? load_image+0x410/0x410
[  254.869969][ T4548] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  254.873089][T16658]  ? __rcu_read_unlock+0x78/0xd0
[  254.873122][T16658]  warn_alloc+0x245/0x320
[  254.889921][T16658]  ? zone_watermark_ok_safe+0x250/0x250
[  254.895526][T16658]  ? __mutex_lock_common+0x435/0x2400
[  254.895566][T16658]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  254.906601][T16658]  __vmalloc_node_range+0x2b1/0x8b0
[  254.906638][T16658]  ? dvb_dvr_do_ioctl+0x12a/0x220
[  254.906657][T16658]  vmalloc+0x75/0x80
[  254.906671][T16658]  ? dvb_dvr_do_ioctl+0x12a/0x220
[  254.924921][ T4365] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.926250][T16658]  dvb_dvr_do_ioctl+0x12a/0x220
[  254.941146][T16658]  dvb_usercopy+0x191/0x2b0
[  254.945668][T16658]  ? dvb_dvr_release+0x3d0/0x3d0
[  254.950612][T16658]  ? dvb_generic_ioctl+0xb0/0xb0
[  254.955242][ T4365] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  254.955574][T16658]  ? dvb_dvr_poll+0x230/0x230
[  254.969173][T16658]  dvb_dvr_ioctl+0x25/0x30
[  254.973590][T16658]  __se_sys_ioctl+0xfa/0x170
[  254.978182][T16658]  do_syscall_64+0x4c/0xa0
[  254.982611][T16658]  ? clear_bhb_loop+0x30/0x80
[  254.985860][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'.
[  254.987295][T16658]  ? clear_bhb_loop+0x30/0x80
[  255.000789][T16658]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  255.006709][T16658] RIP: 0033:0x7fd16a4330d9
[  255.011132][T16658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.030833][T16658] RSP: 002b:00007fd16868b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.039261][T16658] RAX: ffffffffffffffda RBX: 00007fd16a6bafa0 RCX: 00007fd16a4330d9
[  255.047250][T16658] RDX: 00004000000000bc RSI: 0000000000006f2d RDI: 0000000000000003
[  255.055357][T16658] RBP: 00007fd16a4ca024 R08: 0000000000000000 R09: 0000000000000000
[  255.063337][T16658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.071312][T16658] R13: 00007fd16a6bb038 R14: 00007fd16a6bafa0 R15: 00007fffb6ea53b8
[  255.079295][T16658]  </TASK>
[  255.088867][T16658] Mem-Info:
[  255.092078][T16658] active_anon:338 inactive_anon:8512 isolated_anon:0
[  255.092078][T16658]  active_file:5085 inactive_file:46545 isolated_file:0
[  255.092078][T16658]  unevictable:768 dirty:419 writeback:0
[  255.092078][T16658]  slab_reclaimable:21036 slab_unreclaimable:98287
[  255.092078][T16658]  mapped:30329 shmem:1648 pagetables:812 bounce:0
[  255.092078][T16658]  kernel_misc_reclaimable:0
[  255.092078][T16658]  free:1359922 free_pcp:11422 free_cma:0
[  255.130376][ T4365] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  255.136575][T16658] Node 0 active_anon:1320kB inactive_anon:33636kB active_file:20140kB inactive_file:186180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121316kB dirty:1676kB writeback:0kB shmem:4512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12040kB pagetables:3348kB all_unreclaimable? no
[  255.157021][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.180984][T16658] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  255.194655][ T4365] usb 1-1: Product: syz
[  255.219784][T16658] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  255.230820][ T4365] usb 1-1: Manufacturer: syz
[  255.252512][ T5606] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  255.264714][ T4548] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.264884][T16658] lowmem_reserve[]:
[  255.274905][ T4548] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  255.274956][ T4548] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  255.274977][ T4548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.275614][ T4365] usb 1-1: SerialNumber: syz
[  255.291704][T16658]  0
[  255.297865][ T4548] usb 5-1: config 0 descriptor??
[  255.311296][T16658]  2539 2540 2540 2540
[  255.322739][T16658] Node 0 DMA32 free:1500780kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1320kB inactive_anon:33636kB active_file:20140kB inactive_file:186180kB unevictable:1536kB writepending:1676kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:38980kB local_pcp:18032kB free_cma:0kB
[  255.361965][T16658] lowmem_reserve[]: 0 0 0 0 0
[  255.367399][T16658] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  255.393706][T16658] lowmem_reserve[]: 0 0 0 0 0
[  255.399000][T16658] Node 1 Normal free:3923324kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6428kB local_pcp:32kB free_cma:0kB
[  255.428965][T16658] lowmem_reserve[]: 0 0 0 0 0
[  255.433746][T16658] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  255.453573][T16658] Node 0 DMA32: 1093*4kB (UME) 395*8kB (UME) 122*16kB (UME) 318*32kB (UME) 333*64kB (UME) 85*128kB (UME) 33*256kB (UME) 11*512kB (UME) 3*1024kB (ME) 5*2048kB (UME) 347*4096kB (M) = 1500556kB
[  255.478368][T16658] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  255.491498][T16658] Node 1 Normal: 143*4kB (UME) 50*8kB (UME) 33*16kB (UME) 207*32kB (UME) 89*64kB (UE) 29*128kB (UE) 15*256kB (UME) 3*512kB (U) 1*1024kB (U) 2*2048kB (M) 951*4096kB (M) = 3923324kB
[  255.515176][T16658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  255.529343][T16658] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  255.540771][T16658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  255.551802][ T5606] usb 6-1: Using ep0 maxpacket: 16
[  255.557284][T16658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  255.572196][T16658] 53255 total pagecache pages
[  255.577534][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.578475][T16658] 0 pages in swap cache
[  255.591000][ T4548] Bluetooth: Can't get state to change to load ram patch err
[  255.595036][T16658] Swap cache stats: add 297, delete 297, find 58/125
[  255.607026][ T4548] Bluetooth: Loading patch file failed
[  255.612527][ T4548] ath3k: probe of 5-1:0.0 failed with error -121
[  255.618412][T16658] Free swap  = 124472kB
[  255.630222][T16658] Total swap = 124996kB
[  255.638815][T16658] 2097051 pages RAM
[  255.642729][T16658] 0 pages HighMem/MovableOnly
[  255.650611][T16658] 411499 pages reserved
[  255.655128][T16658] 0 pages cma reserved
[  255.695806][ T4365] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  255.705022][ T5606] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  255.723975][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.744950][ T4365] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  255.767485][ T4365] usb 1-1: selecting invalid altsetting 1
[  255.773642][ T4365] usb_set_interface error
[  255.776739][ T5606] usb 6-1: config 0 descriptor??
[  255.785373][ T4365] snd-usb-us122l: probe of 1-1:1.1 failed with error -22
[  255.824833][ T4365] usb 1-1: USB disconnect, device number 24
[  255.832489][ T4443] udevd[4443]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  255.851878][ T6052] usb 5-1: USB disconnect, device number 26
[  255.860347][ T5606] gspca_main: sonixj-2.14.0 probing 0471:0327
[  255.918097][T16706] netlink: 'syz.3.4883': attribute type 4 has an invalid length.
[  255.931619][T16706] netlink: 'syz.3.4883': attribute type 10 has an invalid length.
[  255.939834][T16706] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4883'.
[  255.970351][   T26] audit: type=1326 audit(1787660132.550:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16708 comm="syz.2.4884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5972b300d9 code=0x7ffc0000
[  255.975143][T16706] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  256.000024][   T26] audit: type=1326 audit(1787660132.550:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16708 comm="syz.2.4884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5972b300d9 code=0x7ffc0000
[  256.036479][   T26] audit: type=1326 audit(1787660132.630:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16708 comm="syz.2.4884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5972b300d9 code=0x7ffc0000
[  256.065191][ T5606] gspca_sonixj: reg_w1 err -71
[  256.070048][ T5606] sonixj: probe of 6-1:0.0 failed with error -71
[  256.082908][   T26] audit: type=1326 audit(1787660132.630:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16708 comm="syz.2.4884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5972b300d9 code=0x7ffc0000
[  256.092891][ T5606] usb 6-1: USB disconnect, device number 13
[  256.123796][   T26] audit: type=1326 audit(1787660132.630:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16708 comm="syz.2.4884" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5972b300d9 code=0x7ffc0000
[  256.358137][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4893'.
[  256.397618][ T4365] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  256.654668][ T4365] usb 4-1: Using ep0 maxpacket: 32
[  256.717734][T16777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4905'.
[  256.776160][ T4365] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.782486][T16781] CIFS: bad ip= option (::.)
[  256.800874][ T4365] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.955116][ T4365] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  256.970112][ T4365] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  256.996620][ T4365] usb 4-1: Product: syz
[  256.998936][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4913'.
[  257.004241][ T4365] usb 4-1: Manufacturer: syz
[  257.023729][T16791] loop4: detected capacity change from 0 to 4096
[  257.085877][ T4365] hub 4-1:4.0: USB hub found
[  257.096302][T16791] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  257.304951][ T4365] hub 4-1:4.0: 2 ports detected
[  257.401045][T16849] xt_l2tp: v2 sid > 0xffff: 262144
[  257.513722][T16860] snd_dummy snd_dummy.0: control 3:0:99:syz1:6 is already present
[  257.525387][ T4365] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  257.532266][ T4365] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  257.625744][ T4365] usb 4-1: USB disconnect, device number 29
[  257.935032][T16902] netlink: 388 bytes leftover after parsing attributes in process `syz.0.4940'.
[  257.999097][T16907] loop4: detected capacity change from 0 to 16
[  258.082261][T16907] erofs: (device loop4): mounted with root inode @ nid 36.
[  258.123210][T16915] loop0: detected capacity change from 0 to 256
[  258.158128][ T4542] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  258.182235][T16915] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  258.203804][T16915] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264)
[  258.221731][T16915] FAT-fs (loop0): Filesystem has been set read-only
[  258.520050][T16895] loop2: detected capacity change from 0 to 32768
[  258.534845][ T4542] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98
[  258.543918][ T4542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.548545][T16895] 
[  258.548545][T16895]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  258.548545][T16895] 
[  258.583331][ T4542] usb 6-1: config 0 descriptor??
[  258.646146][ T4542] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  258.659016][ T4542] usb 6-1: Detected FT-X
[  258.690859][  T154] 
[  258.690859][  T154]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  258.690859][  T154] 
[  258.707951][  T154] 
[  258.707951][  T154]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  258.707951][  T154] 
[  258.723181][ T4195] 
[  258.723181][ T4195]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  258.723181][ T4195] 
[  258.755028][ T4195] 
[  258.755028][ T4195]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  258.755028][ T4195] 
[  258.772247][  T275] 
[  258.772247][  T275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  258.772247][  T275] 
[  258.793084][  T275] ==================================================================
[  258.801770][  T275] BUG: KASAN: use-after-free in txEnd+0x329/0x520
[  258.808218][  T275] Write of size 8 at addr ffff8880789f4040 by task jfsCommit/275
[  258.815979][  T275] 
[  258.818310][  T275] CPU: 0 PID: 275 Comm: jfsCommit Not tainted syzkaller #0
[  258.825513][  T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  258.835573][  T275] Call Trace:
[  258.838850][  T275]  <TASK>
[  258.841787][  T275]  dump_stack_lvl+0x188/0x250
[  258.846478][  T275]  ? show_regs_print_info+0x20/0x20
[  258.851687][  T275]  ? _printk+0xda/0x130
[  258.855851][  T275]  ? txEnd+0x329/0x520
[  258.859935][  T275]  ? load_image+0x410/0x410
[  258.864451][  T275]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  258.869925][  T275]  print_address_description+0x60/0x2d0
[  258.875490][  T275]  ? txEnd+0x329/0x520
[  258.879570][  T275]  kasan_report+0xdf/0x130
[  258.884004][  T275]  ? txEnd+0x329/0x520
[  258.888085][  T275]  kasan_check_range+0x235/0x290
[  258.893035][  T275]  txEnd+0x329/0x520
[  258.894905][ T4544] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  258.896944][  T275]  jfs_lazycommit+0x5cf/0xb60
[  258.909166][  T275]  ? txFreelock+0x5a0/0x5a0
[  258.913679][  T275]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  258.919591][  T275]  ? sched_dynamic_update+0x210/0x210
[  258.924980][  T275]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  258.930874][  T275]  ? __kthread_parkme+0x14e/0x1b0
[  258.935901][  T275]  kthread+0x42e/0x520
[  258.939983][  T275]  ? txFreelock+0x5a0/0x5a0
[  258.944478][  T275]  ? kthread_blkcg+0xd0/0xd0
[  258.949059][  T275]  ret_from_fork+0x1f/0x30
[  258.953470][  T275]  </TASK>
[  258.956481][  T275] 
[  258.958801][  T275] Allocated by task 16895:
[  258.963191][  T275]  __kasan_kmalloc+0xaf/0xe0
[  258.967767][  T275]  lmLogOpen+0x2c0/0xf90
[  258.971995][  T275]  jfs_mount_rw+0xfb/0x5a0
[  258.976407][  T275]  jfs_fill_super+0x58d/0xad0
[  258.981073][  T275]  mount_bdev+0x28a/0x3c0
[  258.985386][  T275]  legacy_get_tree+0xe6/0x180
[  258.990042][  T275]  vfs_get_tree+0x88/0x270
[  258.994454][  T275]  do_new_mount+0x247/0xa40
[  258.998949][  T275]  __se_sys_mount+0x2e3/0x3d0
[  259.003617][  T275]  do_syscall_64+0x4c/0xa0
[  259.008020][  T275]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  259.013902][  T275] 
[  259.016213][  T275] Freed by task 4195:
[  259.020176][  T275]  kasan_set_track+0x4b/0x70
[  259.024856][  T275]  kasan_set_free_info+0x1f/0x40
[  259.029800][  T275]  ____kasan_slab_free+0xd5/0x110
[  259.034817][  T275]  slab_free_freelist_hook+0xec/0x170
[  259.040182][  T275]  kfree+0xef/0x2a0
[  259.043977][  T275]  lmLogClose+0x292/0x530
[  259.048286][  T275]  jfs_umount+0x288/0x360
[  259.052602][  T275]  jfs_put_super+0x88/0x190
[  259.057092][  T275]  generic_shutdown_super+0x130/0x300
[  259.062470][  T275]  kill_block_super+0x7c/0xe0
[  259.067138][  T275]  deactivate_locked_super+0x93/0xf0
[  259.072408][  T275]  cleanup_mnt+0x426/0x4d0
[  259.074810][ T4542] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  259.076807][  T275]  task_work_run+0x125/0x1a0
[  259.076829][  T275]  exit_to_user_mode_loop+0x10f/0x130
[  259.076844][  T275]  exit_to_user_mode_prepare+0xee/0x180
[  259.094932][ T4542] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  259.099119][  T275]  syscall_exit_to_user_mode+0x16/0x40
[  259.099147][  T275]  do_syscall_64+0x58/0xa0
[  259.099160][  T275]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  259.121452][  T275] 
[  259.123759][  T275] The buggy address belongs to the object at ffff8880789f4000
[  259.123759][  T275]  which belongs to the cache kmalloc-1k of size 1024
[  259.125798][ T4542] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  259.137795][  T275] The buggy address is located 64 bytes inside of
[  259.137795][  T275]  1024-byte region [ffff8880789f4000, ffff8880789f4400)
[  259.137821][  T275] The buggy address belongs to the page:
[  259.137843][  T275] page:ffffea0001e27c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x789f0
[  259.137860][  T275] head:ffffea0001e27c00 order:3 compound_mapcount:0 compound_pincount:0
[  259.137879][  T275] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  259.137902][  T275] raw: 00fff00000010200 ffffea0001860000 0000000300000003 ffff888016c41dc0
[  259.137914][  T275] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  259.137922][  T275] page dumped because: kasan: bad access detected
[  259.137934][  T275] page_owner tracks the page as allocated
[  259.137939][  T275] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4192, ts 54433110023, free_ts 54332932556
[  259.137961][  T275]  get_page_from_freelist+0x24f6/0x2670
[  259.137984][  T275]  __alloc_pages+0x1ee/0x480
[  259.137997][  T275]  new_slab+0xc0/0x4b0
[  259.138009][  T275]  ___slab_alloc+0x807/0xdd0
[  259.138023][  T275]  __kmalloc_node_track_caller+0x13d/0x3a0
[  259.138037][  T275]  __alloc_skb+0x22c/0x750
[  259.138052][  T275]  rtmsg_fib+0xd7/0x440
[  259.138066][  T275]  fib_table_insert+0xd24/0x1b80
[  259.138081][  T275]  fib_magic+0x2ca/0x3b0
[  259.138094][  T275]  fib_add_ifaddr+0x135/0x5c0
[  259.138107][  T275]  fib_inetaddr_event+0x13c/0x1c0
[  259.138121][  T275]  blocking_notifier_call_chain+0x103/0x1b0
[  259.138142][  T275]  __inet_insert_ifa+0x9ea/0xbd0
[  259.138158][  T275]  inet_rtm_newaddr+0x9cc/0x18c0
[  259.138177][  T275]  rtnetlink_rcv_msg+0x7f1/0xf10
[  259.138193][  T275]  netlink_rcv_skb+0x1e9/0x430
[  259.138210][  T275] page last free stack trace:
[  259.138216][  T275]  free_unref_page_prepare+0x637/0x6c0
[  259.138232][  T275]  free_unref_page+0x8f/0x2a0
[  259.138248][  T275]  __unfreeze_partials+0x188/0x1e0
[  259.138261][  T275]  put_cpu_partial+0x12d/0x190
[  259.138276][  T275]  qlist_free_all+0x35/0x90
[  259.138290][  T275]  kasan_quarantine_reduce+0x150/0x160
[  259.138303][  T275]  __kasan_slab_alloc+0x2f/0xc0
[  259.138318][  T275]  slab_post_alloc_hook+0x4c/0x380
[  259.138332][  T275]  __kmalloc+0x189/0x340
[  259.138345][  T275]  fib6_info_alloc+0x2e/0xe0
[  259.138360][  T275]  ip6_route_info_create+0x455/0x1220
[  259.138376][  T275]  ip6_route_add+0x24/0x130
[  259.138390][  T275]  addrconf_add_dev+0x295/0x3c0
[  259.138403][  T275]  addrconf_init_auto_addrs+0x633/0xab0
[  259.154273][ T4542] usb 6-1: USB disconnect, device number 14
[  259.159623][  T275]  addrconf_notify+0xa6b/0xf20
[  259.159651][  T275]  raw_notifier_call_chain+0xcb/0x160
[  259.159666][  T275] 
[  259.159671][  T275] Memory state around the buggy address:
[  259.159679][  T275]  ffff8880789f3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  259.159690][  T275]  ffff8880789f3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  259.159699][  T275] >ffff8880789f4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  259.159706][  T275]                                            ^
[  259.159715][  T275]  ffff8880789f4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  259.159724][  T275]  ffff8880789f4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  259.159731][  T275] ==================================================================
[  259.159736][  T275] Disabling lock debugging due to kernel taint
[  259.210787][  T275] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  259.219577][ T4542] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  259.221677][  T275] CPU: 0 PID: 275 Comm: jfsCommit Tainted: G    B             syzkaller #0
[  259.241789][ T4542] ftdi_sio 6-1:0.0: device disconnected
[  259.246468][  T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  259.246484][  T275] Call Trace:
[  259.246491][  T275]  <TASK>
[  259.246497][  T275]  dump_stack_lvl+0x188/0x250
[  259.246522][  T275]  ? show_regs_print_info+0x20/0x20
[  259.294752][ T4544] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  259.299261][  T275]  ? load_image+0x410/0x410
[  259.304192][ T4544] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  259.309105][  T275]  panic+0x2f8/0x850
[  259.309129][  T275]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  259.309145][  T275]  ? bpf_jit_dump+0xd0/0xd0
[  259.309161][  T275]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  259.309174][  T275]  ? _raw_spin_unlock+0x40/0x40
[  259.309186][  T275]  ? txEnd+0x329/0x520
[  259.309199][  T275]  check_panic_on_warn+0x80/0xa0
[  259.315210][ T4544] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  259.318869][  T275]  ? txEnd+0x329/0x520
[  259.323539][ T4544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.328972][  T275]  end_report+0x6d/0xf0
[  259.328997][  T275]  kasan_report+0x102/0x130
[  259.329011][  T275]  ? txEnd+0x329/0x520
[  259.329026][  T275]  kasan_check_range+0x235/0x290
[  259.329041][  T275]  txEnd+0x329/0x520
[  259.357160][T16954] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  259.358462][  T275]  jfs_lazycommit+0x5cf/0xb60
[  259.648530][  T275]  ? txFreelock+0x5a0/0x5a0
[  259.653014][  T275]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  259.658895][  T275]  ? sched_dynamic_update+0x210/0x210
[  259.664252][  T275]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  259.670138][  T275]  ? __kthread_parkme+0x14e/0x1b0
[  259.675155][  T275]  kthread+0x42e/0x520
[  259.679203][  T275]  ? txFreelock+0x5a0/0x5a0
[  259.683680][  T275]  ? kthread_blkcg+0xd0/0xd0
[  259.688258][  T275]  ret_from_fork+0x1f/0x30
[  259.692664][  T275]  </TASK>
[  259.695886][  T275] Kernel Offset: disabled
[  259.700195][  T275] Rebooting in 86400 seconds..