last executing test programs:

1.801106085s ago: executing program 3 (id=5585):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)

1.741055196s ago: executing program 3 (id=5590):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

1.499490243s ago: executing program 3 (id=5598):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x41, 0x0, &(0x7f0000001180))

1.383165595s ago: executing program 3 (id=5602):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)

1.261796509s ago: executing program 3 (id=5607):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000140)=ANY=[@ANYBLOB='grpquota,discard,iocharset=cp863,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp866,\x00ocharset=cp775,errors=continue,grpquota,integrity,\x00'], 0x29, 0x6239, &(0x7f0000004180)="$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")
symlinkat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.124666412s ago: executing program 4 (id=5612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000039000900000000000000000001000000040000000c0001802e00000005470000080002"], 0x34}}, 0x0)

913.130507ms ago: executing program 1 (id=5618):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
socket$igmp(0x2, 0x3, 0x2)

897.829178ms ago: executing program 4 (id=5620):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6})

804.51373ms ago: executing program 0 (id=5621):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0xc, "8f"}], 0x18}, 0x0)

739.667742ms ago: executing program 1 (id=5622):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0)

739.457522ms ago: executing program 4 (id=5623):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@can_delroute={0x34, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x3}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "c18ab2c782fa073d"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x5, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

685.228093ms ago: executing program 2 (id=5624):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x61, @link_local}, 0x10)

635.810934ms ago: executing program 1 (id=5625):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x7, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8b4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c00", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x5b10df4d84c3f683}, 0x64040848)

605.384695ms ago: executing program 0 (id=5626):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000180)={0x28, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x28}], 0x1}, 0x0)

509.256428ms ago: executing program 4 (id=5627):
r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x3, 0x109bc0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x4000000, 0xfffffffe, 0x3002, 0x2, 0x3, 0x9, 0x7, 0x2}})

509.145408ms ago: executing program 2 (id=5628):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0)

440.755339ms ago: executing program 4 (id=5629):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x8927, &(0x7f0000000cc0)="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")

438.177799ms ago: executing program 2 (id=5630):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/6, &(0x7f0000002740)=0x6)

413.45346ms ago: executing program 0 (id=5631):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

357.100091ms ago: executing program 1 (id=5632):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x80000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x3c}}, 0x0)

316.054042ms ago: executing program 2 (id=5633):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000000)=0x51)

301.527733ms ago: executing program 0 (id=5634):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7a, 0x0, &(0x7f0000000300))

249.208384ms ago: executing program 1 (id=5635):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

189.784315ms ago: executing program 2 (id=5636):
close(0xffffffffffffffff)
close(0xffffffffffffffff)

181.581846ms ago: executing program 0 (id=5637):
r0 = syz_socket_connect_nvme_tcp()
close(r0)

125.047937ms ago: executing program 1 (id=5638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @private1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)

111.809288ms ago: executing program 4 (id=5639):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$eJzs3T9sVPcdAPDfe3aLTYHalIFKlXpSUVu1lWUz0RqpxhiMDS4VLQxdjrN9gJuzD9nnKAODoyxImSJliDKgRMrmCXnLRJZIGbNkJDNSMmSJFAnlort7Z99758MX4sMBfT4S/t37/be/9373e8PxixOVO0truaW1XGElV164tXY693q5tL5cDHHWp205+6Lr8TlQvYiT2B+cq+cv/ufG6RA+WfziSbVarYaa/rCrsZbX335zb6E1bYpbL95q9Lt7b/vlfyGEE23zqukLIQwkr88l6WSSDoYQjoUQohDCjXtv38zt02wePi6ezT+du781fmp288FW5989CuH90m//dnv5qz/0jX/5l30aHgAAAAAAAAAAAAAAAACAl9z0tavX/z06Fh5FoX8zav++7nSSdvp+bHXf/L73vywAAAAAAAAAAAAAAAAAAAD8TO18/z8XHd/l+/9TSTrRoX31n92N88efOE96Y+ZfV6cujI4l579HbeVnkqyvz/WF4eb56p91Pv/9XKb97ue/t4/zvJrza447FKJ4JHUdxyMjIXyYHPx+Mjocl8prlb/eKq+vLO7bNF5a6fg3Tu9PRSc50D8V/2ec/z+Z6b/35///pu3dVLu+uX9vsVdaOv59Het99Gb0jPj/crve+Uy7FxF/nl86/v31vMHWChONBaAW/3f6977/pzL99yr+x0IIuag211xqBajtYWr5nfYrpKXj/4t6XmrpTP6Qne7/7zLxv5Dp/6DW/43sBxG7Sse/sY4PpGrs3P/D8d73/8VM/wcR/9r8N3z+dyUd/0ONzP5Ulfpfstv1fzrTf6/ifz1O5nksSr0DNqNGfqf/r460dPwH2sp3nv/irvb/lzLtX9TzX3Pc5vNfc/n/c9R4/mN32/HfCk+q1cGO9bq9/2cy7Xq9/k/U939tzpzo5aCvkPT9f7iel947D9V/dop/NRP/2Uz/zxH/jzs/he6o70oGmvHfWU++P9TI/8D+ryvp+P+qkRm31tio/6zv/6K99/+XM/0fxP6vNv+NuLejvirS8T/SsV4t/p938fl/JdOu9/EPYbT5BmjfvrCHdPyPdqxXv/8H9o7/XKZdr+P/p152DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPASmEzSoRDFI6nrOB4ZCeF8cn0yHI7mC4v5+VJ54bW1EKaS/Fw4Ht0ulecLpfzSSnmxmC+USuWFEC4k5SfCQLRWKlfyy4W7F7f7GozuFAurlflioRJCmE7yfxeONvuaX6osF+6GEC5tl/06Lq/evVNYyS8urf5jdHR0NMxsz2E4Kr5RKa5UGqM3SkOY3W47FLVMrl58eXsuR6L/l9dXVwqlev6Vljal8kKh1NJmLil7NwxHldX1lYVCpZgvlW83xztIE0k6NXPtv9eujLWV34wa6eSLnRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9Kj8b+/F0Lob1zFIYRclLyIkn8pDx8Xz+afzt3fGj81u/lg68ludQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4gR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs0j9KA0EUB+A3Y6Glx7BadjvbFUW0cEXwBHoMD6NH8RLewSJF2hQhkMxC2D+wTVJ9X/Ngfsy8B/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3jqJvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//9HQIRk=")
openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18)

91.683958ms ago: executing program 0 (id=5640):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

827.57µs ago: executing program 2 (id=5641):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)

0s ago: executing program 3 (id=5642):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[], 0x1, 0x5577, &(0x7f000000b000)="$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")
utime(&(0x7f0000000200)='.\x00', 0x0)

kernel console output (not intermixed with test programs):

99"
[  216.597938][T11651] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  216.784116][T11662] SET target dimension over the limit!
[  216.793006][T11666] loop3: detected capacity change from 0 to 256
[  216.812993][T11668] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3429'.
[  216.854625][T11666] FAT-fs (loop3): "posix" option is obsolete, not supported now
[  216.883073][T11672] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3431'.
[  216.914499][T11672] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3431'.
[  216.954790][T11672] bond0: (slave bond_slave_0): Releasing backup interface
[  216.997980][T11672] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  217.100756][   T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  217.271837][    T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  217.352037][   T21] usb 3-1: Using ep0 maxpacket: 8
[  217.472747][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  217.499392][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  217.553297][   T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  217.563108][    T7] usb 2-1: Using ep0 maxpacket: 32
[  217.588963][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  217.613631][   T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  217.665680][   T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  217.691641][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.705278][    T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.727997][   T21] usb 3-1: config 0 descriptor??
[  217.746686][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  217.755540][T11669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  217.832354][T11707] loop4: detected capacity change from 0 to 512
[  217.934804][T11707] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.3445: invalid block
[  217.965466][    T7] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  217.984838][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.007582][T11716] loop3: detected capacity change from 0 to 256
[  218.046016][T11707] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3445: invalid indirect mapped block 10 (level 1)
[  218.071350][T11707] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3445: invalid indirect mapped block 8 (level 1)
[  218.096515][    T7] usb 2-1: Product: syz
[  218.100794][    T7] usb 2-1: Manufacturer: syz
[  218.123717][T11716] FAT-fs (loop3): Directory bread(block 64) failed
[  218.135735][    T7] usb 2-1: SerialNumber: syz
[  218.141503][T11707] EXT4-fs (loop4): 1 truncate cleaned up
[  218.147428][T11716] FAT-fs (loop3): Directory bread(block 65) failed
[  218.155105][T11707] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  218.183037][    T7] usb 2-1: config 0 descriptor??
[  218.191174][T11723] dlm: no locking on control device
[  218.196486][T11716] FAT-fs (loop3): Directory bread(block 66) failed
[  218.196554][T11716] FAT-fs (loop3): Directory bread(block 67) failed
[  218.196626][T11716] FAT-fs (loop3): Directory bread(block 68) failed
[  218.196661][T11716] FAT-fs (loop3): Directory bread(block 69) failed
[  218.196804][T11716] FAT-fs (loop3): Directory bread(block 70) failed
[  218.252616][T11716] FAT-fs (loop3): Directory bread(block 71) failed
[  218.283956][    T7] qmi_wwan 2-1:0.0: bogus CDC Union: master=1, slave=0
[  218.305488][    T7] qmi_wwan: probe of 2-1:0.0 failed with error -22
[  218.316686][T11716] FAT-fs (loop3): Directory bread(block 72) failed
[  218.323282][T11716] FAT-fs (loop3): Directory bread(block 73) failed
[  218.360454][    T7] usb 3-1: USB disconnect, device number 10
[  218.499079][ T4234] usb 2-1: USB disconnect, device number 22
[  219.240198][T11772] netlink: 'syz.0.3473': attribute type 21 has an invalid length.
[  219.296918][T11772] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3473'.
[  219.341424][T11772] netlink: 'syz.0.3473': attribute type 1 has an invalid length.
[  219.387059][T11772] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3473'.
[  219.783597][T10602] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  219.938586][T11822] netlink: 'syz.1.3491': attribute type 3 has an invalid length.
[  220.017874][T11822] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3491'.
[  220.155021][T10602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  220.176418][T10602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  220.183874][T11832] loop2: detected capacity change from 0 to 512
[  220.366072][T10602] usb 4-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2
[  220.375398][T11832] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.3494: invalid block
[  220.413485][T10602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.452500][T11832] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3494: invalid indirect mapped block 10 (level 1)
[  220.476582][T10602] usb 4-1: Product: syz
[  220.480842][T10602] usb 4-1: Manufacturer: syz
[  220.486273][T11832] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3494: invalid indirect mapped block 8 (level 1)
[  220.518083][T11832] EXT4-fs (loop2): 1 truncate cleaned up
[  220.523798][T11832] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  220.536516][T10602] usb 4-1: SerialNumber: syz
[  220.568985][T10602] usb 4-1: config 0 descriptor??
[  220.646220][T11820] loop4: detected capacity change from 0 to 32768
[  220.655366][T11849] x_tables: duplicate underflow at hook 2
[  220.691197][T11851] binder: 11850:11851 ioctl c018620c 200000000380 returned -22
[  220.731999][T11820] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.3489 (11820)
[  220.797906][T11820] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  220.847778][T11820] BTRFS info (device loop4): enabling ssd optimizations
[  220.869807][ T6727] usb 4-1: USB disconnect, device number 17
[  220.889556][T11854] loop1: detected capacity change from 0 to 256
[  220.897919][T11820] BTRFS info (device loop4): not using ssd optimizations
[  220.905013][T11820] BTRFS info (device loop4): turning off barriers
[  220.954871][T11820] BTRFS info (device loop4): use no compression
[  220.962785][T11820] BTRFS info (device loop4): using free space tree
[  220.976176][T11820] BTRFS info (device loop4): has skinny extents
[  221.008713][T11854] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  221.091921][T11854] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  221.342844][T11888] loop0: detected capacity change from 0 to 256
[  221.411049][T11888] exfat: Deprecated parameter 'utf8'
[  221.417813][T11888] exfat: Deprecated parameter 'namecase'
[  221.495134][T11888] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  221.679529][T11897] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.172854][ T5381] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  222.190489][T11919] dlm: non-version read from control device 169
[  222.545666][ T5381] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  222.566577][ T5381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.600854][ T5381] usb 5-1: config 0 descriptor??
[  222.658290][ T5381] cp210x 5-1:0.0: cp210x converter detected
[  222.867777][ T5381] usb 5-1: cp210x converter now attached to ttyUSB0
[  222.949432][T11966] loop3: detected capacity change from 0 to 1024
[  223.073105][ T5377] usb 5-1: USB disconnect, device number 16
[  223.107289][ T5377] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  223.115552][ T5377] cp210x 5-1:0.0: device disconnected
[  223.271809][T11982] loop0: detected capacity change from 0 to 512
[  223.337107][T11982] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  223.467641][T11982] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.3556: bad orphan inode 15
[  223.524341][T11982] ext4_test_bit(bit=14, block=18) = 1
[  223.542372][T11982] is_bad_inode(inode)=0
[  223.559273][T11982] NEXT_ORPHAN(inode)=1023
[  223.563661][T11982] max_ino=32
[  223.566893][T11982] i_nlink=0
[  223.582657][T11996] xt_CT: You must specify a L4 protocol and not use inversions on it
[  223.599008][T11982] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  223.626993][T11982] ext2 filesystem being mounted at /681/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  223.707933][T11982] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 3: comm syz.0.3556: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0
[  223.732504][T12006] netlink: 'syz.4.3565': attribute type 1 has an invalid length.
[  223.952883][T12015] ip6t_srh: unknown srh invflags 4000
[  224.052329][T12021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3575'.
[  224.109983][T12021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3575'.
[  224.140863][T12021] netlink: 'syz.4.3575': attribute type 6 has an invalid length.
[  224.280967][T12036] netlink: 'syz.4.3581': attribute type 1 has an invalid length.
[  224.330545][T12036] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3581'.
[  224.339711][T12036] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3581'.
[  224.425098][T12045] netlink: 'syz.0.3585': attribute type 10 has an invalid length.
[  224.470366][T12045] team0: Device hsr_slave_0 failed to register rx_handler
[  225.154806][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3607'.
[  225.176876][T12088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3607'.
[  225.491533][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  225.530204][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  225.538141][T12112] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  225.586796][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  225.685945][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready
[  226.164277][T12159] xt_CT: You must specify a L4 protocol and not use inversions on it
[  226.284193][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'.
[  226.406682][   T13] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  226.706684][T12192] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  226.723450][ T4234] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  226.807863][   T13] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  226.830128][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3660'.
[  226.857829][   T13] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  226.878124][   T13] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  226.895618][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.008326][ T4234] usb 2-1: Using ep0 maxpacket: 32
[  227.021767][T12210] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  227.138845][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.158582][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  227.219221][   T13] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  227.227858][   T13] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input19
[  227.264325][   T13] input: failed to attach handler kbd to device input19, error: -5
[  227.322337][   T13] usb 4-1: USB disconnect, device number 18
[  227.339432][ T4234] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  227.339467][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.339492][ T4234] usb 2-1: Product: syz
[  227.339509][ T4234] usb 2-1: Manufacturer: syz
[  227.339526][ T4234] usb 2-1: SerialNumber: syz
[  227.341543][ T4234] usb 2-1: config 0 descriptor??
[  227.492748][T12224] loop4: detected capacity change from 0 to 256
[  227.517155][T12209] loop2: detected capacity change from 0 to 32768
[  227.620824][ T4234] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device:
[  227.637491][T12209] jfs_strtoUCS: char2uni returned -22.
[  227.661536][T12209] charset = cp864, char = 0x9f
[  227.667340][ T4234] f0 e4 3d a7 d3 60 4f fe 
[  227.678238][ T4234] snd-usb-6fire: probe of 2-1:0.0 failed with error -5
[  227.830449][ T5377] usb 2-1: USB disconnect, device number 23
[  228.112151][T12248] syz.3.3686 uses obsolete (PF_INET,SOCK_PACKET)
[  228.144966][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3687'.
[  228.384505][T12273] netlink: 'syz.0.3696': attribute type 2 has an invalid length.
[  228.687368][T12285] loop4: detected capacity change from 0 to 4096
[  228.757293][T12285] ntfs3: loop4: ino=3, Correct links count -> 2.
[  229.294126][ T4234] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  229.349922][T12275] loop1: detected capacity change from 0 to 32768
[  229.443945][T12275] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  229.503097][T12325] SET target dimension over the limit!
[  229.527052][T12275] JBD2: Ignoring recovery information on journal
[  229.560589][T12327] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3722'.
[  229.584775][ T4234] usb 4-1: Using ep0 maxpacket: 16
[  229.598662][T12275] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  229.681056][T12327] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3722'.
[  229.715158][ T4234] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  229.734553][T12275] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1
[  229.757062][T12327] bond0: (slave bond_slave_0): Releasing backup interface
[  229.818950][T12327] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  229.843624][T12275] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  229.890027][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  229.897635][T12275] OCFS2: File system is now read-only.
[  229.903153][T12275] (syz.1.3698,12275,1):ocfs2_search_chain:1783 ERROR: status = -30
[  229.920220][ T4234] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  229.945288][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.955255][T12275] (syz.1.3698,12275,1):ocfs2_search_chain:1893 ERROR: status = -30
[  229.964861][ T4234] usb 4-1: Product: syz
[  229.970168][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  229.986661][T12275] (syz.1.3698,12275,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  229.995326][ T4234] usb 4-1: Manufacturer: syz
[  229.998830][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.024043][T12275] (syz.1.3698,12275,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  230.036010][ T4234] usb 4-1: SerialNumber: syz
[  230.056527][ T4234] r8152-cfgselector 4-1: config 0 descriptor??
[  230.061009][T12275] (syz.1.3698,12275,1):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  230.125895][T12275] (syz.1.3698,12275,1):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  230.176521][T12275] (syz.1.3698,12275,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  230.220089][T12275] (syz.1.3698,12275,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  230.261922][T12275] (syz.1.3698,12275,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  230.302818][T12275] (syz.1.3698,12275,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  230.355744][T12275] (syz.1.3698,12275,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  230.379325][T12275] (syz.1.3698,12275,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  230.414095][T12275] (syz.1.3698,12275,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  230.426694][T12275] (syz.1.3698,12275,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  230.439684][T12275] (syz.1.3698,12275,0):ocfs2_mknod:357 ERROR: status = -30
[  230.477191][T12275] (syz.1.3698,12275,0):ocfs2_mknod:502 ERROR: status = -30
[  230.496237][T12275] (syz.1.3698,12275,0):ocfs2_mkdir:659 ERROR: status = -30
[  230.546220][ T4234] r8152-cfgselector 4-1: Unknown version 0x0000
[  230.576845][ T4234] r8152-cfgselector 4-1: USB disconnect, device number 19
[  230.781916][ T4200] ocfs2: Unmounting device (7,1) on (node local)
[  231.027796][ T4234] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  231.323128][T12398] loop0: detected capacity change from 0 to 256
[  231.419061][T12398] FAT-fs (loop0): Directory bread(block 64) failed
[  231.428711][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.459031][ T4234] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  231.468299][T12398] FAT-fs (loop0): Directory bread(block 65) failed
[  231.487247][T12398] FAT-fs (loop0): Directory bread(block 66) failed
[  231.522346][T12398] FAT-fs (loop0): Directory bread(block 67) failed
[  231.578950][T12398] FAT-fs (loop0): Directory bread(block 68) failed
[  231.590537][T12398] FAT-fs (loop0): Directory bread(block 69) failed
[  231.607443][T12398] FAT-fs (loop0): Directory bread(block 70) failed
[  231.647087][T12398] FAT-fs (loop0): Directory bread(block 71) failed
[  231.654132][ T4234] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  231.679329][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.687690][T12398] FAT-fs (loop0): Directory bread(block 72) failed
[  231.699789][T12398] FAT-fs (loop0): Directory bread(block 73) failed
[  231.707757][ T4234] usb 5-1: Product: syz
[  231.716520][ T4234] usb 5-1: Manufacturer: syz
[  231.732820][ T4234] usb 5-1: SerialNumber: syz
[  232.180579][ T4234] usb 5-1: 0:2 : does not exist
[  232.185597][ T4234] usb 5-1: unit 4 not found!
[  232.271072][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'.
[  232.275335][ T4234] usb 5-1: USB disconnect, device number 17
[  232.411658][T12448] loop1: detected capacity change from 0 to 4096
[  232.489511][T12448] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback.
[  232.552150][ T5181] udevd[5181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.739980][T12474] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  233.105616][T12497] netlink: 'syz.0.3789': attribute type 3 has an invalid length.
[  233.131112][T12499] loop1: detected capacity change from 0 to 512
[  233.160359][T12497] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3789'.
[  233.215696][T12499] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.3790: missing EA_INODE flag
[  233.252673][T12499] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.3790: error while reading EA inode 2 err=-117
[  233.265933][T12499] EXT4-fs (loop1): 1 orphan inode deleted
[  233.271817][T12499] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  233.391489][T12512] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3793'.
[  233.438473][T12512] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3793'.
[  233.479429][T12512] bond0: (slave bond_slave_0): Releasing backup interface
[  233.510536][T12512] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  233.612035][T12516] netlink: 'syz.3.3799': attribute type 5 has an invalid length.
[  233.682926][ T4234] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  233.693130][T12524] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.3801' sets config #0
[  233.928701][T12539] netlink: 'syz.1.3808': attribute type 21 has an invalid length.
[  233.965905][T12539] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3808'.
[  233.997437][T12539] netlink: 'syz.1.3808': attribute type 1 has an invalid length.
[  234.022931][T12543] loop0: detected capacity change from 0 to 2048
[  234.031529][T12539] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3808'.
[  234.083913][ T4234] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  234.092219][ T4234] usb 5-1: config 0 has no interface number 0
[  234.119875][T12549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.168940][ T4234] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  234.198321][ T4234] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  234.244000][ T4234] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[  234.305087][ T4234] usb 5-1: config 0 interface 2 has no altsetting 0
[  234.524581][ T4234] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[  234.533696][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.588473][ T4234] usb 5-1: Product: syz
[  234.592785][ T4234] usb 5-1: Manufacturer: syz
[  234.614538][ T4234] usb 5-1: SerialNumber: syz
[  234.633254][ T4234] usb 5-1: config 0 descriptor??
[  234.675011][T12514] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  234.684160][T12514] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  234.855190][   T26] audit: type=1400 audit(1786622521.216:17): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12582 comm="syz.2.3829"
[  235.120062][T12597] bridge0: port 3(bond0) entered blocking state
[  235.156999][T12597] bridge0: port 3(bond0) entered disabled state
[  235.170669][ T4234] usb 5-1: USB disconnect, device number 18
[  235.179856][T12597] device bond0 entered promiscuous mode
[  235.205598][T12597] device bond_slave_0 entered promiscuous mode
[  235.242243][T12597] device bond_slave_1 entered promiscuous mode
[  235.286449][T12597] bridge0: port 3(bond0) entered blocking state
[  235.293521][T12597] bridge0: port 3(bond0) entered forwarding state
[  235.393205][T12565] loop3: detected capacity change from 0 to 32768
[  235.463822][ T8153] udevd[8153]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.543583][T12565] JBD2: Ignoring recovery information on journal
[  235.655534][T12565] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  235.856810][ T4189] ocfs2: Unmounting device (7,3) on (node local)
[  235.983006][T12641] netlink: 'syz.3.3854': attribute type 1 has an invalid length.
[  236.016338][T12643] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.3857'.
[  236.442144][T12676] device vlan0 entered promiscuous mode
[  236.479332][T12676] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  236.507893][ T5369] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  236.664048][T12689] overlayfs: unrecognized mount option "\" or missing value
[  236.729161][ T5381] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  236.889494][ T5369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.921932][ T5369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  236.958152][ T5369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  236.988290][ T5369] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  237.011558][T12705] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3886'.
[  237.028493][ T5369] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c
[  237.041911][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3886'.
[  237.063932][ T5369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.095718][ T5369] usb 2-1: config 0 descriptor??
[  237.104245][T12708] netlink: 'syz.2.3888': attribute type 2 has an invalid length.
[  237.123829][T12708] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3888'.
[  237.165936][ T5369] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20
[  237.196640][T12712] nvme_fabrics: unknown parameter or missing value '­' in ctrl creation request
[  237.270049][ T5381] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db
[  237.294714][ T5381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.338150][ T5381] usb 5-1: Product: syz
[  237.358035][ T5381] usb 5-1: Manufacturer: syz
[  237.373294][ T5381] usb 5-1: SerialNumber: syz
[  237.389769][ T5369] usb 2-1: USB disconnect, device number 24
[  237.418314][ T5381] usb 5-1: config 0 descriptor??
[  237.462835][ T5369] appletouch 2-1:0.0: input: appletouch disconnected
[  237.558614][T12733] netlink: 'syz.2.3899': attribute type 2 has an invalid length.
[  237.605878][T12733] netlink: 'syz.2.3899': attribute type 1 has an invalid length.
[  237.650968][T12733] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.688388][    T7] usb 5-1: USB disconnect, device number 19
[  237.701364][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'.
[  237.728598][T12734] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  237.765119][T12734] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  237.777153][T12734] device bridge5 entered promiscuous mode
[  237.837672][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3905'.
[  237.886795][T12744] loop3: detected capacity change from 0 to 1024
[  237.934577][T12746] netlink: 'syz.2.3907': attribute type 2 has an invalid length.
[  238.026718][T12744] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.3906: lblock 2 mapped to illegal pblock 2 (length 1)
[  238.077794][T12744] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  238.086375][T12744] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.3906: lblock 0 mapped to illegal pblock 48 (length 1)
[  238.101283][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3911'.
[  238.138996][T12744] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  238.183868][T12758] netlink: 'syz.0.3912': attribute type 3 has an invalid length.
[  238.200338][T12744] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3906: Failed to acquire dquot type 0
[  238.268701][T12744] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  238.299087][T12744] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.3906: mark_inode_dirty error
[  238.366227][T12744] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  238.398891][T12744] EXT4-fs (loop3): 1 orphan inode deleted
[  238.407266][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3918'.
[  238.419322][T12744] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none.
[  238.441535][ T3070] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  238.462920][T12772] netlink: 'syz.1.3917': attribute type 1 has an invalid length.
[  238.497018][T12772] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3917'.
[  238.506216][ T3070] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  238.507510][ T3070] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0
[  238.576708][T12772] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3917'.
[  238.711391][ T1183] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm kworker/u4:3: lblock 2 mapped to illegal pblock 2 (length 1)
[  238.780516][ T1183] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  238.810090][ T1183] EXT4-fs error (device loop3): ext4_write_dquot:6216: comm kworker/u4:3: Failed to commit dquot type 0
[  238.854297][ T1183] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  238.917054][ T4189] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  238.938028][ T4189] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  238.978035][ T4189] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  239.540268][T12838] netlink: 'syz.0.3950': attribute type 1 has an invalid length.
[  240.028874][T12872] netlink: 'syz.4.3968': attribute type 1 has an invalid length.
[  240.171274][T12884] netlink: 'syz.0.3972': attribute type 10 has an invalid length.
[  240.221737][T12884] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  240.331828][T12895] netlink: 'syz.1.3979': attribute type 2 has an invalid length.
[  240.676093][T12924] xt_l2tp: v2 sid > 0xffff: 262144
[  240.745311][T12930] xt_bpf: check failed: parse error
[  240.968244][ T4263] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  240.988896][T12940] loop3: detected capacity change from 0 to 512
[  241.110233][T12940] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  241.193477][T12940] ext4 filesystem being mounted at /788/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.226376][   T26] audit: type=1326 audit(1786622527.587:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12947 comm="syz.4.4004" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ed5a0d9 code=0x7ffc0000
[  241.250818][    C1] vkms_vblank_simulate: vblank timer overrun
[  241.310984][T12940] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.3999: Directory hole found for htree leaf block 0
[  241.314076][   T26] audit: type=1326 audit(1786622527.647:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12947 comm="syz.4.4004" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f7b6ed5a0d9 code=0x7ffc0000
[  241.381837][T12928] loop0: detected capacity change from 0 to 32768
[  241.393850][T12951] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0)
[  241.410004][T12940] EXT4-fs (loop3): Remounting filesystem read-only
[  241.421263][   T26] audit: type=1326 audit(1786622527.647:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12947 comm="syz.4.4004" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ed5a0d9 code=0x7ffc0000
[  241.458382][T12953] __nla_validate_parse: 4 callbacks suppressed
[  241.458397][T12953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4005'.
[  241.512916][T12928] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  241.529012][   T26] audit: type=1326 audit(1786622527.647:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12947 comm="syz.4.4004" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ed5a0d9 code=0x7ffc0000
[  241.553249][    C1] vkms_vblank_simulate: vblank timer overrun
[  241.569094][T12928] JBD2: Ignoring recovery information on journal
[  241.603977][ T4263] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  241.613144][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.633841][ T4263] usb 2-1: Product: syz
[  241.638132][ T4263] usb 2-1: Manufacturer: syz
[  241.642750][ T4263] usb 2-1: SerialNumber: syz
[  241.650022][ T4263] usb 2-1: config 0 descriptor??
[  241.681367][T12928] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  241.706274][ T4263] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  241.748288][T12928] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1
[  241.775442][T12928] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  241.786809][T12956] device veth1_vlan left promiscuous mode
[  241.800586][T12928] OCFS2: File system is now read-only.
[  241.806354][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4009'.
[  241.834332][T12928] (syz.0.3994,12928,1):ocfs2_search_chain:1783 ERROR: status = -30
[  241.890566][T12928] (syz.0.3994,12928,1):ocfs2_search_chain:1893 ERROR: status = -30
[  241.924227][T12928] (syz.0.3994,12928,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  241.947483][T12928] (syz.0.3994,12928,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  241.976854][T12928] (syz.0.3994,12928,1):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  242.014410][T12928] (syz.0.3994,12928,1):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  242.022757][T12928] (syz.0.3994,12928,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  242.052562][T12928] (syz.0.3994,12928,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  242.070888][T12971] ip_tables: iptables: counters copy to user failed while replacing table
[  242.083174][T12928] (syz.0.3994,12928,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  242.093092][T12966] loop3: detected capacity change from 0 to 8192
[  242.113306][T12928] (syz.0.3994,12928,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  242.132910][T12928] (syz.0.3994,12928,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  242.144580][ T4263] gspca_stk1135: reg_w 0x0 err -71
[  242.150772][ T4263] gspca_stk1135: serial bus timeout: status=0x00
[  242.152426][T12928] (syz.0.3994,12928,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  242.172940][T12617]  loop3: p1 p2 < > p3
[  242.176621][T12928] (syz.0.3994,12928,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  242.193961][T12617] loop3: partition table partially beyond EOD, truncated
[  242.197373][T12928] (syz.0.3994,12928,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  242.213323][ T4263] gspca_stk1135: Sensor write failed
[  242.214666][ T5381] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  242.234584][T12617] loop3: p1 size 1342439424 extends beyond EOD, truncated
[  242.244326][ T4263] gspca_stk1135: serial bus timeout: status=0x00
[  242.257465][T12928] (syz.0.3994,12928,1):ocfs2_mknod:357 ERROR: status = -30
[  242.263884][ T4263] gspca_stk1135: Sensor write failed
[  242.271246][ T4263] gspca_stk1135: serial bus timeout: status=0x00
[  242.280560][T12617] loop3: p2 start 4059840512 is beyond EOD, truncated
[  242.287559][ T4263] gspca_stk1135: Sensor read failed
[  242.287553][T12928] (syz.0.3994,12928,1):ocfs2_mknod:502 ERROR: status = -30
[  242.292812][ T4263] gspca_stk1135: serial bus timeout: status=0x00
[  242.311686][T12617] loop3: p3 start 67108864 is beyond EOD, truncated
[  242.330871][T12928] (syz.0.3994,12928,1):ocfs2_mkdir:659 ERROR: status = -30
[  242.347967][T12966]  loop3: p1 p2 < > p3
[  242.352460][T12966] loop3: partition table partially beyond EOD, truncated
[  242.354683][ T4263] gspca_stk1135: Sensor read failed
[  242.374883][T12966] loop3: p1 size 1342439424 extends beyond EOD, truncated
[  242.384750][ T4263] gspca_stk1135: Detected sensor type unknown (0x0)
[  242.391433][ T4263] gspca_stk1135: serial bus timeout: status=0x00
[  242.405845][T12966] loop3: p2 start 4059840512 is beyond EOD, truncated
[  242.412756][T12966] loop3: p3 start 67108864 is beyond EOD, truncated
[  242.434727][ T5377] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  242.452500][ T4263] gspca_stk1135: Sensor read failed
[  242.467958][ T4263] gspca_stk1135: serial bus timeout: status=0x00
[  242.477631][ T4263] gspca_stk1135: Sensor read failed
[  242.482884][ T4263] gspca_stk1135: serial bus timeout: status=0x00
[  242.485836][ T5381] usb 3-1: Using ep0 maxpacket: 16
[  242.506883][ T4263] gspca_stk1135: Sensor write failed
[  242.518523][ T4263] gspca_stk1135: serial bus timeout: status=0x00
[  242.530475][ T4263] gspca_stk1135: Sensor write failed
[  242.536261][ T4263] stk1135: probe of 2-1:0.0 failed with error -71
[  242.562995][ T4263] usb 2-1: USB disconnect, device number 25
[  242.605416][ T4187] ocfs2: Unmounting device (7,0) on (node local)
[  242.625261][ T5381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  242.669818][ T5381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  242.815403][ T5377] usb 4-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config
[  242.851065][ T5377] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 116, changing to 10
[  242.875320][ T5381] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  242.898587][ T5381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.907083][ T5377] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 51186, setting to 1024
[  242.928861][ T5381] usb 3-1: Product: syz
[  242.943225][ T5381] usb 3-1: Manufacturer: syz
[  242.963160][ T5381] usb 3-1: SerialNumber: syz
[  242.996362][ T5381] usb 3-1: config 0 descriptor??
[  243.046110][ T5381] hub 3-1:0.0: bad descriptor, ignoring hub
[  243.059178][ T5381] hub: probe of 3-1:0.0 failed with error -5
[  243.090306][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'.
[  243.096278][ T5377] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  243.135395][ T5377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.174666][ T5381] snd-usb-audio: probe of 3-1:0.0 failed with error -12
[  243.181805][ T5377] usb 4-1: Product: syz
[  243.205474][ T5377] usb 4-1: Manufacturer: syz
[  243.215321][ T5377] usb 4-1: SerialNumber: syz
[  243.265959][T12973] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  243.273958][ T5381] usb 3-1: USB disconnect, device number 11
[  243.513154][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.625907][ T5377] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[  243.652264][ T5377] usb 4-1: USB disconnect, device number 20
[  243.732830][T13027] loop1: detected capacity change from 0 to 128
[  243.812496][T13027] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  244.105147][T13047] kernel read not supported for file /À 
œ7³ÏüâW)«s“§Ç!Q�öì¥fsõ‡r X%ÔàÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|�Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 13047 comm: syz.1.4037)
[  244.176193][T13007] loop0: detected capacity change from 0 to 32768
[  244.256660][   T26] audit: type=1800 audit(1786622530.614:22): pid=13047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4037" name=C020019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772A05825D4E0D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=60689 res=0 errno=0
[  244.404297][   T26] audit: type=1800 audit(1786622530.744:23): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4034" name="file1" dev="loop0" ino=7 res=0 errno=0
[  244.506634][ T4263] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  244.744247][T13077] netlink: 'syz.3.4051': attribute type 15 has an invalid length.
[  244.780857][T13079] loop2: detected capacity change from 0 to 256
[  244.908208][T13085] netlink: set zone limit has 8 unknown bytes
[  244.973691][ T4263] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.997203][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  245.018654][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  245.038899][ T4263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  245.117465][ T4263] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c
[  245.157235][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.165637][T13097] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4060'.
[  245.197064][ T4263] usb 5-1: config 0 descriptor??
[  245.197367][ T5369] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  245.223939][T13099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4061'.
[  245.240436][ T4263] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21
[  245.496933][ T4263] usb 5-1: USB disconnect, device number 20
[  245.521958][ T4263] appletouch 5-1:0.0: input: appletouch disconnected
[  245.598745][ T5369] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  245.629157][ T5369] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  245.656381][ T5369] usb 3-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config
[  245.688337][ T5369] usb 3-1: config 0 has no interfaces?
[  245.694001][ T5369] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  245.713603][ T5369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.735690][ T5369] usb 3-1: config 0 descriptor??
[  245.868345][T13130] loop1: detected capacity change from 0 to 512
[  245.971658][T13130] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  245.995848][ T5369] usb 3-1: USB disconnect, device number 12
[  246.038514][T13130] ext4 filesystem being mounted at /729/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.092177][T13130] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz.1.4076: Directory hole found for htree leaf block 0
[  246.147984][T13151] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  246.211167][T13130] EXT4-fs (loop1): Remounting filesystem read-only
[  246.298469][T13155] nvme_fabrics: no handler found for transport hoop.
[  246.328378][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'.
[  246.490225][T13175] netlink: 'syz.4.4095': attribute type 21 has an invalid length.
[  246.490293][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4095'.
[  246.490319][T13175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4095'.
[  246.618536][ T5369] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  246.774396][T13189] loop0: detected capacity change from 0 to 1024
[  246.786992][T13192] loop4: detected capacity change from 0 to 512
[  246.815173][T13189] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.4103: lblock 2 mapped to illegal pblock 2 (length 1)
[  246.831854][T13189] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  246.840427][T13189] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.4103: lblock 0 mapped to illegal pblock 48 (length 1)
[  246.865202][T13189] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  246.885487][T13189] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.4103: Failed to acquire dquot type 0
[  246.898837][T13189] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  246.928980][T13189] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.4103: mark_inode_dirty error
[  246.968202][T13189] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  247.000001][ T5369] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  247.015795][T13189] EXT4-fs (loop0): 1 orphan inode deleted
[  247.022009][ T5369] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  247.032721][  T154] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  247.047531][T13192] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  247.047753][T13192] ext4 filesystem being mounted at /800/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.090747][T13189] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none.
[  247.143332][  T154] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  247.159364][ T5369] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  247.202569][  T154] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0
[  247.226937][T13192] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.4104: Directory hole found for htree leaf block 0
[  247.265033][  T154] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm kworker/u4:2: lblock 2 mapped to illegal pblock 2 (length 1)
[  247.284737][T13192] EXT4-fs (loop4): Remounting filesystem read-only
[  247.304134][  T154] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  247.323971][  T154] EXT4-fs error (device loop0): ext4_write_dquot:6216: comm kworker/u4:2: Failed to commit dquot type 0
[  247.363906][  T154] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  247.381069][ T5369] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  247.398953][ T5369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.412669][T13213] netlink: 'syz.1.4115': attribute type 8 has an invalid length.
[  247.417567][ T5369] usb 4-1: Product: syz
[  247.424669][ T5369] usb 4-1: Manufacturer: syz
[  247.429402][ T5369] usb 4-1: SerialNumber: syz
[  247.439900][ T5369] usb 4-1: config 0 descriptor??
[  247.460492][ T4187] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  247.503960][ T4187] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  247.547394][ T4187] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  247.719448][ T5369] usb 4-1: Found UVC 34.00 device syz (8086:0b5b)
[  247.734328][ T5369] usb 4-1: No valid video chain found.
[  247.763390][ T5369] usb 4-1: USB disconnect, device number 21
[  247.858919][T13205] loop2: detected capacity change from 0 to 32768
[  247.947683][T13205] JBD2: Ignoring recovery information on journal
[  248.051057][T13245] loop4: detected capacity change from 0 to 64
[  248.069954][T13247] device wlan0 entered promiscuous mode
[  248.125712][T13205] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  248.469404][ T4188] ocfs2: Unmounting device (7,2) on (node local)
[  248.554941][ T5372] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  248.564458][T13270] No source specified
[  248.805462][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4148'.
[  248.958695][T13291] loop0: detected capacity change from 0 to 1024
[  249.021074][T13291] hfsplus: extend alloc file! (8192,512,16777719)
[  249.040280][ T5372] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  249.059314][T13297] netlink: 'syz.2.4152': attribute type 49 has an invalid length.
[  249.061708][ T5372] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  249.103849][ T5372] usb 4-1: Product: syz
[  249.116874][ T5372] usb 4-1: SerialNumber: syz
[  249.146741][ T5372] usb 4-1: config 0 descriptor??
[  249.279801][T13297] device ip6gretap0 entered promiscuous mode
[  249.315344][T13301] netlink: 'syz.0.4155': attribute type 10 has an invalid length.
[  249.333057][T13301] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  249.378435][T13301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.409333][T13307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4158'.
[  249.431601][ T5372] usb 4-1: USB disconnect, device number 22
[  249.761639][T13326] blk_update_request: I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  249.903779][T13293] loop1: detected capacity change from 0 to 32768
[  250.018134][T13293] JBD2: Ignoring recovery information on journal
[  250.256880][T13293] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  250.323619][T13349] nvme_tcp: malformed address passed: .27.0.0.1:4420
[  250.585755][T13324] loop4: detected capacity change from 0 to 32768
[  250.593184][ T4200] ocfs2: Unmounting device (7,1) on (node local)
[  250.760820][T13378] netlink: 'syz.0.4195': attribute type 21 has an invalid length.
[  250.791433][T13324] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  250.813448][T13324] JBD2: Ignoring recovery information on journal
[  250.826464][T13378] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4195'.
[  250.882006][T13378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4195'.
[  250.963361][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4187'.
[  250.973400][T13324] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  251.119496][T13324] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1
[  251.196966][T13401] netlink: 'syz.3.4192': attribute type 13 has an invalid length.
[  251.271424][T13324] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  251.294209][T13324] OCFS2: File system is now read-only.
[  251.314307][T13324] (syz.4.4165,13324,0):ocfs2_search_chain:1783 ERROR: status = -30
[  251.338065][T13408] openvswitch: netlink: Actions may not be safe on all matching packets
[  251.361458][T13324] (syz.4.4165,13324,0):ocfs2_search_chain:1893 ERROR: status = -30
[  251.388725][T13324] (syz.4.4165,13324,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  251.437975][T13324] (syz.4.4165,13324,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  251.471885][T13324] (syz.4.4165,13324,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  251.503800][T13324] (syz.4.4165,13324,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  251.551644][T13324] (syz.4.4165,13324,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  251.560676][T13324] (syz.4.4165,13324,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  251.591669][T13324] (syz.4.4165,13324,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  251.613113][T13426] loop1: detected capacity change from 0 to 8
[  251.626049][T13324] (syz.4.4165,13324,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  251.654356][T13324] (syz.4.4165,13324,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  251.727644][T13324] (syz.4.4165,13324,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  251.744970][   T26] audit: type=1800 audit(1786622538.099:24): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4204" name="file1" dev="loop1" ino=5 res=0 errno=0
[  251.776343][T13324] (syz.4.4165,13324,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  251.812162][T13324] (syz.4.4165,13324,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  251.863837][T13324] (syz.4.4165,13324,0):ocfs2_mknod:357 ERROR: status = -30
[  251.896979][T13324] (syz.4.4165,13324,0):ocfs2_mknod:502 ERROR: status = -30
[  251.945483][T13324] (syz.4.4165,13324,0):ocfs2_mkdir:659 ERROR: status = -30
[  251.959641][T13445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  252.035834][T13445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  252.106389][ T4195] ocfs2: Unmounting device (7,4) on (node local)
[  252.233784][T13445] device syz_tun left promiscuous mode
[  252.240650][T13445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  252.259904][T13445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  252.287618][T13445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  252.452082][ T5372] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  252.487579][T13471] loop2: detected capacity change from 0 to 8
[  252.553743][T13471] SQUASHFS error: zlib decompression failed, data probably corrupt
[  252.606998][T13471] SQUASHFS error: Failed to read block 0x4de: -5
[  252.631893][T13471] SQUASHFS error: zlib decompression failed, data probably corrupt
[  252.676562][T13471] SQUASHFS error: Failed to read block 0x4df: -5
[  252.701099][T13471] SQUASHFS error: zlib decompression failed, data probably corrupt
[  252.711614][T13471] SQUASHFS error: Failed to read block 0x4e0: -5
[  252.730307][ T5369] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  252.742944][T13471] SQUASHFS error: Failed to read block 0x4e4: -5
[  252.749500][T13471] SQUASHFS error: Failed to read block 0x9cc: -5
[  252.760583][T13471] SQUASHFS error: Failed to read block 0x2cf4: -5
[  252.768799][T13471] SQUASHFS error: Failed to read block 0x52cf4: -5
[  252.780135][T13471] SQUASHFS error: Failed to read block 0x535f4: -5
[  252.798011][T13471] SQUASHFS error: zlib decompression failed, data probably corrupt
[  252.816780][T13471] SQUASHFS error: Failed to read block 0x4de: -5
[  252.828763][   T26] audit: type=1800 audit(1786622539.178:25): pid=13471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4221" name="file1" dev="loop2" ino=5 res=0 errno=0
[  252.852412][ T5372] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  252.871982][ T5372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.910242][ T5372] usb 4-1: config 0 descriptor??
[  252.953429][ T5372] cp210x 4-1:0.0: cp210x converter detected
[  252.991688][ T5369] usb 1-1: Using ep0 maxpacket: 16
[  253.076586][T13499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4234'.
[  253.175230][ T5372] usb 4-1: cp210x converter now attached to ttyUSB0
[  253.289511][T13513] netlink: 'syz.1.4241': attribute type 1 has an invalid length.
[  253.302990][ T5369] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  253.316695][ T5369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.329905][ T5369] usb 1-1: Product: syz
[  253.334267][ T5369] usb 1-1: Manufacturer: syz
[  253.338910][ T5369] usb 1-1: SerialNumber: syz
[  253.345451][ T5369] usb 1-1: config 0 descriptor??
[  253.393004][ T5369] visor 1-1:0.0: Sony Clie 3.5 converter detected
[  253.399763][ T5372] usb 4-1: USB disconnect, device number 23
[  253.417481][ T5372] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  253.451239][ T5372] cp210x 4-1:0.0: device disconnected
[  253.507738][T13524] SET target dimension over the limit!
[  253.593234][ T5369] usb 1-1: clie_3_5_startup: get config number bad return length: 0
[  253.621954][ T5369] visor: probe of 1-1:0.0 failed with error -5
[  253.725093][T13539] netlink: 'syz.4.4253': attribute type 3 has an invalid length.
[  253.795981][ T5372] usb 1-1: USB disconnect, device number 19
[  254.181139][T13565] loop2: detected capacity change from 0 to 2048
[  254.235307][T13573] netlink: 'syz.4.4268': attribute type 49 has an invalid length.
[  254.307721][T13565] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  254.390559][T13585] dlm: non-version read from control device 8192
[  254.595198][T13598] netlink: 'syz.3.4278': attribute type 1 has an invalid length.
[  254.615868][T13601] Cannot find add_set index 3 as target
[  254.747031][T13607] loop3: detected capacity change from 0 to 512
[  254.823226][ T5369] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  254.859776][T13607] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  254.950909][T13607] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6)
[  254.978215][T13607] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  254.987770][T13607] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.4283: Failed to acquire dquot type 1
[  255.011726][T13607] EXT4-fs (loop3): 1 truncate cleaned up
[  255.017535][T13607] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,discard,nodelalloc,minixdf,min_batch_time=0x0000000000000002,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback.
[  255.037114][    C1] vkms_vblank_simulate: vblank timer overrun
[  255.064205][T13607] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6)
[  255.143466][T13607] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  255.181042][T13607] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.4283: Failed to acquire dquot type 1
[  255.213605][ T5369] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  255.222748][ T5369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.244576][T13638] loop4: detected capacity change from 0 to 512
[  255.308616][ T5369] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  255.970624][T13693] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4322'.
[  256.029689][T13693] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4322'.
[  256.046297][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  256.052649][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.063921][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4322'.
[  256.109721][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4324'.
[  256.511797][ T5369] usb 1-1: USB disconnect, device number 20
[  256.538739][ T5369] idmouse 1-1:1.0: disconnected
[  256.553628][T13731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4338'.
[  256.638969][ T4263] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  256.767392][T13738] loop2: detected capacity change from 0 to 4096
[  256.855725][T13738] NILFS (loop2): invalid segment: Checksum error in segment payload
[  256.870722][T13738] NILFS (loop2): trying rollback from an earlier position
[  256.931933][T13738] NILFS (loop2): recovery complete
[  256.993865][T13756] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  257.079543][ T4263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[  257.284669][ T4263] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  257.293877][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.328402][ T4263] usb 4-1: Product: syz
[  257.332834][ T4263] usb 4-1: Manufacturer: syz
[  257.338672][T13778] netlink: 'syz.1.4355': attribute type 6 has an invalid length.
[  257.354284][ T4263] usb 4-1: SerialNumber: syz
[  257.370588][T13778] netlink: 'syz.1.4355': attribute type 7 has an invalid length.
[  257.381310][ T4263] usb 4-1: config 0 descriptor??
[  257.398881][T13778] netlink: 'syz.1.4355': attribute type 8 has an invalid length.
[  257.415322][T13761] loop4: detected capacity change from 0 to 8192
[  257.424655][T13717] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  257.455420][ T4263] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  257.558345][ T8153]  loop4: p1 p2 < > p3
[  257.562503][ T8153] loop4: partition table partially beyond EOD, truncated
[  257.590918][ T8153] loop4: p1 size 1342439424 extends beyond EOD, truncated
[  257.618423][ T8153] loop4: p2 start 4059840512 is beyond EOD, truncated
[  257.634586][ T5372] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  257.654566][ T8153] loop4: p3 start 67108864 is beyond EOD, truncated
[  257.674685][ T4234] usb 4-1: USB disconnect, device number 24
[  257.684274][T13761]  loop4: p1 p2 < > p3
[  257.689451][T13761] loop4: partition table partially beyond EOD, truncated
[  257.719082][T13761] loop4: p1 size 1342439424 extends beyond EOD, truncated
[  257.761162][T13761] loop4: p2 start 4059840512 is beyond EOD, truncated
[  257.783311][T13803] netlink: 'syz.0.4364': attribute type 1 has an invalid length.
[  257.801061][T13761] loop4: p3 start 67108864 is beyond EOD, truncated
[  257.823497][T13803] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4364'.
[  257.945240][T13810] loop2: detected capacity change from 0 to 736
[  257.991228][T13812] loop1: detected capacity change from 0 to 2048
[  258.004682][ T5372] usb 5-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config
[  258.021044][ T5372] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 116, changing to 10
[  258.033074][ T5372] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 51186, setting to 1024
[  258.062905][T13812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.244866][ T5372] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  258.273642][ T5372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.303094][ T5372] usb 5-1: Product: syz
[  258.322285][ T5372] usb 5-1: Manufacturer: syz
[  258.344602][ T5372] usb 5-1: SerialNumber: syz
[  258.403829][T13827] PKCS8: Unsupported PKCS#8 version
[  258.406973][T13781] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  258.694936][ T4234] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  258.764812][ T5372] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[  258.805002][ T5372] usb 5-1: USB disconnect, device number 21
[  258.944938][ T4234] usb 4-1: Using ep0 maxpacket: 32
[  259.055670][T13869] loop0: detected capacity change from 0 to 24
[  259.085706][T13869] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  259.095073][ T4234] usb 4-1: config 5 has an invalid interface number: 130 but max is 0
[  259.105358][ T4234] usb 4-1: config 5 has no interface number 0
[  259.111465][ T4234] usb 4-1: config 5 interface 130 has no altsetting 0
[  259.138211][T13869] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  259.171189][T13873] loop1: detected capacity change from 0 to 4096
[  259.208782][T13873] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  259.225276][    T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  259.240731][T13873] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  259.291473][T13873] ntfs3: loop1: Failed to load $Extend.
[  259.310068][ T4234] usb 4-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61
[  259.332766][   T26] audit: type=1800 audit(1786622545.686:26): pid=13873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4396" name="file2" dev="loop1" ino=31 res=0 errno=0
[  259.344990][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.387062][ T4234] usb 4-1: Product: syz
[  259.391351][ T4234] usb 4-1: Manufacturer: syz
[  259.427241][ T4234] usb 4-1: SerialNumber: syz
[  259.450022][T13877] loop0: detected capacity change from 0 to 1024
[  259.595678][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  259.630298][    T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  259.659281][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  259.695157][    T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  259.712487][    T7] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  259.767881][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.801233][    T7] usb 3-1: config 0 descriptor??
[  259.851296][ T4234] mct_u232 4-1:5.130: MCT U232 converter detected
[  259.864043][ T4234] mct_u232 ttyUSB0: expected endpoint missing
[  259.873245][ T4234] usb 4-1: USB disconnect, device number 25
[  259.912935][ T4234] mct_u232 4-1:5.130: device disconnected
[  260.016045][T13913] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4417'.
[  260.065490][    T7] hdpvr 3-1:0.0: firmware version 0x0 dated 
[  260.079788][    T7] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[  260.295348][    T7] hdpvr 3-1:0.0: device init failed
[  260.300750][    T7] hdpvr: probe of 3-1:0.0 failed with error -12
[  260.340787][    T7] usb 3-1: USB disconnect, device number 13
[  260.444371][T13937] loop0: detected capacity change from 0 to 4096
[  260.554841][T13937] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  260.570478][T13937] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  260.621194][T13937] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  260.647139][T13937] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  260.663268][T13937] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  260.709405][T13937] ntfs: volume version 3.1.
[  260.724704][T13937] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  260.774709][T13937] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  260.836925][T13937] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  260.876290][T13937] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  261.206121][ T5369] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  261.248970][T13985] loop0: detected capacity change from 0 to 512
[  261.370015][T13985] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  261.409142][T13999] loop2: detected capacity change from 0 to 2048
[  261.417067][T13985] ext4 filesystem being mounted at /869/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  261.451913][T13999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.502513][T13985] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.4451: Failed to acquire dquot type 0
[  261.565435][ T5369] usb 2-1: config 11 has an invalid interface number: 109 but max is 0
[  261.595245][ T5369] usb 2-1: config 11 has no interface number 0
[  261.610272][ T5369] usb 2-1: config 11 interface 109 altsetting 119 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  261.628418][ T5369] usb 2-1: config 11 interface 109 has no altsetting 0
[  261.815522][ T5369] usb 2-1: New USB device found, idVendor=0582, idProduct=63dc, bcdDevice=5f.b4
[  261.849964][ T5369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.875602][ T5369] usb 2-1: Product: syz
[  261.890452][ T5369] usb 2-1: Manufacturer: syz
[  261.910449][ T5369] usb 2-1: SerialNumber: syz
[  261.950665][T14018] loop4: detected capacity change from 0 to 4096
[  262.018727][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  262.036119][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  262.056959][T14023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  262.260180][T14030] device xfrm0 entered promiscuous mode
[  262.358755][ T5369] usb 2-1: USB disconnect, device number 26
[  262.593390][T14022] loop2: detected capacity change from 0 to 32768
[  262.612835][T12617] udevd[12617]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:11.109/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  262.685353][T14022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4471 (14022)
[  262.714137][T14055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  262.771002][T14022] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  262.790661][T14055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  262.835417][T14022] BTRFS info (device loop2): using free space tree
[  262.841961][T14022] BTRFS info (device loop2): has skinny extents
[  262.848871][T14055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  262.913497][T14064] netlink: 'syz.3.4490': attribute type 1 has an invalid length.
[  262.933298][T14064] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4490'.
[  263.027956][ T5377] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  263.225488][T14022] BTRFS info (device loop2): enabling ssd optimizations
[  263.395264][ T5377] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  263.438228][ T5377] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  263.491535][ T5377] usb 5-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config
[  263.541342][ T5377] usb 5-1: config 0 has no interfaces?
[  263.575066][ T5377] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  263.606861][T14121] set_capacity_and_notify: 1 callbacks suppressed
[  263.606874][T14121] loop0: detected capacity change from 0 to 256
[  263.622466][ T5377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.643911][ T5377] usb 5-1: config 0 descriptor??
[  263.760805][T14121] FAT-fs (loop0): Directory bread(block 64) failed
[  263.778558][T14121] FAT-fs (loop0): Directory bread(block 65) failed
[  263.790466][T14121] FAT-fs (loop0): Directory bread(block 66) failed
[  263.797171][T14127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  263.797472][T14127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  263.822571][T14121] FAT-fs (loop0): Directory bread(block 67) failed
[  263.835274][T14121] FAT-fs (loop0): Directory bread(block 68) failed
[  263.843947][T14121] FAT-fs (loop0): Directory bread(block 69) failed
[  263.858523][T14121] FAT-fs (loop0): Directory bread(block 70) failed
[  263.890438][T14121] FAT-fs (loop0): Directory bread(block 71) failed
[  263.901463][T14121] FAT-fs (loop0): Directory bread(block 72) failed
[  263.919790][ T4234] usb 5-1: USB disconnect, device number 22
[  263.941077][T14121] FAT-fs (loop0): Directory bread(block 73) failed
[  264.124314][T14127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.184664][T14135] loop2: detected capacity change from 0 to 256
[  264.281002][T14135] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  264.596900][T14163] delete_channel: no stack
[  264.698505][T14170] loop1: detected capacity change from 0 to 64
[  264.775576][ T4234] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  264.791512][T14170] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  264.851973][T14178] loop2: detected capacity change from 0 to 128
[  264.937397][T14178] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  264.989984][T14178] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  265.025080][T14186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4525'.
[  265.046928][ T4234] usb 4-1: Using ep0 maxpacket: 32
[  265.185319][ T4234] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  265.202207][ T4234] usb 4-1: config 0 has no interface number 0
[  265.209934][ T4234] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  265.435160][T14209] netlink: 'syz.1.4547': attribute type 1 has an invalid length.
[  265.445184][ T4234] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  265.465345][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.475890][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4537'.
[  265.484230][ T4234] usb 4-1: Product: syz
[  265.493788][ T4234] usb 4-1: Manufacturer: syz
[  265.504066][ T4234] usb 4-1: SerialNumber: syz
[  265.560578][ T4234] usb 4-1: config 0 descriptor??
[  265.595409][T14155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  265.641662][T14220] loop0: detected capacity change from 0 to 8
[  265.747258][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  265.747271][   T26] audit: type=1800 audit(1786622552.151:27): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4540" name="file1" dev="loop0" ino=5 res=0 errno=0
[  265.772732][    C0] vkms_vblank_simulate: vblank timer overrun
[  265.835298][ T4234] asix: probe of 4-1:0.188 failed with error -71
[  265.861920][ T4234] usb 4-1: USB disconnect, device number 26
[  265.916533][T14229] loop2: detected capacity change from 0 to 256
[  265.940714][T14227] loop1: detected capacity change from 0 to 4096
[  265.975722][T14229] exfat: Deprecated parameter 'utf8'
[  265.988134][T14227] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  266.027930][T14229] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  266.110416][T14205] loop4: detected capacity change from 0 to 40427
[  266.168966][T14205] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  266.194754][T14205] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  266.245359][T14205] F2FS-fs (loop4): invalid crc value
[  266.283394][T14205] F2FS-fs (loop4): Found nat_bits in checkpoint
[  266.379917][T14250] xt_connbytes: Forcing CT accounting to be enabled
[  266.439116][T14250] xt_bpf: check failed: parse error
[  266.447128][T14253] loop3: detected capacity change from 0 to 512
[  266.486213][T14257] netlink: 'syz.1.4560': attribute type 20 has an invalid length.
[  266.520522][T14205] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  266.532898][T14205] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  266.562137][T14253] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  266.616393][T14253] ext4 filesystem being mounted at /863/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  266.716509][T14253] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[  266.787192][T14253] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  266.846840][T14253] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.4558: Failed to acquire dquot type 0
[  266.892123][   T26] audit: type=1326 audit(1786622553.291:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14273 comm="syz.1.4566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd4e5540d9 code=0x0
[  266.928786][T14278] x_tables: unsorted underflow at hook 4
[  267.116754][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4571'.
[  267.337381][T14292] loop1: detected capacity change from 0 to 4096
[  267.392844][T14292] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  267.419696][T14292] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  267.484096][T14292] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  267.509515][T14292] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  267.545124][T14292] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  267.591970][T14292] ntfs: volume version 3.1.
[  267.616481][T14292] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  267.759110][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4589'.
[  267.865019][ T5383] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  268.098596][T14346] syz.4.4600 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  268.116130][T14342] EXT4-fs (loop0): Ignoring removed orlov option
[  268.128036][T14342] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5
[  268.128036][T14342] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  268.128036][T14342] 
[  268.211990][T14342] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,nouser_xattr,,errors=continue. Quota mode: writeback.
[  268.228571][T14342] ext4 filesystem being mounted at /910/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.246154][ T5383] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  268.256417][ T5383] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3
[  268.425340][ T5383] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95
[  268.443399][ T5383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.481756][ T5383] usb 3-1: Product: syz
[  268.497169][ T5383] usb 3-1: Manufacturer: syz
[  268.505071][ T5383] usb 3-1: SerialNumber: syz
[  268.595124][T14374] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4613'.
[  268.721513][T14383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4617'.
[  268.840099][ T5383] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  268.859566][ T5383] dvb_usb_af9015: probe of 3-1:2.0 failed with error -22
[  268.915331][ T5383] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  268.924089][ T5383] dvb_usb_af9035: probe of 3-1:2.0 failed with error -22
[  268.955386][ T5383] usb 3-1: USB disconnect, device number 14
[  269.171163][T14412] netlink: 'syz.1.4640': attribute type 3 has an invalid length.
[  269.288253][T14418] netlink: 'syz.3.4632': attribute type 3 has an invalid length.
[  269.370789][T14424] netlink: 'syz.1.4635': attribute type 1 has an invalid length.
[  269.396749][T14424] netlink: 'syz.1.4635': attribute type 9 has an invalid length.
[  269.500840][T14422] set_capacity_and_notify: 1 callbacks suppressed
[  269.500855][T14422] loop0: detected capacity change from 0 to 2048
[  269.692424][T14422] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  270.147857][T14491] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4669'.
[  270.238352][T14495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4672'.
[  270.375295][T14509] tc_dump_action: action bad kind
[  271.019558][T14566] loop3: detected capacity change from 0 to 512
[  271.201168][T14583] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4715'.
[  271.242905][T14584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4714'.
[  271.336477][T14590] netlink: 'syz.1.4721': attribute type 2 has an invalid length.
[  271.356409][T14593] loop3: detected capacity change from 0 to 256
[  271.385269][T14590] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4721'.
[  271.488363][T14593] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda219aab, utbl_chksum : 0xe619d30d)
[  271.546027][T14593] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  271.600430][T14593] exFAT-fs (loop3): Filesystem has been set read-only
[  271.877488][T14627] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  272.463723][T14668] netlink: 'syz.1.4755': attribute type 6 has an invalid length.
[  272.545045][T14668] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4755'.
[  272.885192][T14693] netlink: 'syz.3.4765': attribute type 25 has an invalid length.
[  272.914763][T14693] netlink: 'syz.3.4765': attribute type 6 has an invalid length.
[  273.087561][T14705] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  273.398251][T14726] ieee802154 phy0 wpan0: encryption failed: -22
[  273.453713][T14730] xt_TPROXY: Can be used only with -p tcp or -p udp
[  273.645164][T14747] netlink: 'syz.3.4788': attribute type 1 has an invalid length.
[  273.679885][T14747] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4788'.
[  273.746205][T14754] loop0: detected capacity change from 0 to 128
[  273.835913][T14760] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  273.901168][T14760] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  273.920757][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4796'.
[  273.947414][T14760] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  274.286131][T14794] netlink: 'syz.2.4806': attribute type 1 has an invalid length.
[  274.334676][T14794] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4806'.
[  274.673950][T14827] ieee802154 phy0 wpan0: encryption failed: -22
[  274.799107][T14835] netlink: 'syz.2.4825': attribute type 8 has an invalid length.
[  274.854833][T14833] xt_CT: No such helper "netbios-ns"
[  275.524909][T14887] loop1: detected capacity change from 0 to 256
[  275.796098][T14887] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[  275.821084][T14887] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  275.862519][T14897] loop4: detected capacity change from 0 to 512
[  275.949559][T14897] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  276.067428][T14897] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  276.108258][T14897] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  276.160407][T14897] EXT4-fs (loop4): orphan cleanup on readonly fs
[  276.167153][T14897] __quota_error: 10 callbacks suppressed
[  276.167167][T14897] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  276.227598][T14897] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  276.333835][T14897] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  276.416460][T14897] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4850: bg 0: block 40: padding at end of block bitmap is not set
[  276.504127][T14919] loop2: detected capacity change from 0 to 2048
[  276.511295][T14897] EXT4-fs (loop4): Remounting filesystem read-only
[  276.529582][T14897] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  276.543201][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'.
[  276.553546][T14897] EXT4-fs (loop4): Remounting filesystem read-only
[  276.596437][T14897] EXT4-fs (loop4): 1 truncate cleaned up
[  276.602138][T14897] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback.
[  276.664428][T14919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  276.742024][T14897] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  276.935639][T14937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4869'.
[  276.956344][T14939] openvswitch: netlink: Actions may not be safe on all matching packets
[  276.961178][T14937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4869'.
[  277.020463][T14937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4869'.
[  277.031413][   T13] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  277.495376][   T13] usb 1-1: unable to get BOS descriptor or descriptor too short
[  277.535245][   T13] usb 1-1: not running at top speed; connect to a high speed hub
[  277.555058][T14971] loop2: detected capacity change from 0 to 512
[  277.635158][   T13] usb 1-1: config 8 has an invalid interface number: 43 but max is 1
[  277.652264][   T13] usb 1-1: config 8 has an invalid interface number: 35 but max is 1
[  277.656060][T14976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4888'.
[  277.670667][   T13] usb 1-1: config 8 has no interface number 0
[  277.680322][T14978] netlink: 'syz.3.4889': attribute type 12 has an invalid length.
[  277.688425][   T13] usb 1-1: config 8 has no interface number 1
[  277.694558][   T13] usb 1-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping
[  277.721541][   T13] usb 1-1: config 8 interface 43 has no altsetting 0
[  277.728809][   T13] usb 1-1: config 8 interface 35 has no altsetting 0
[  277.742839][T14971] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  277.764304][T14971] ext4 filesystem being mounted at /1104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  277.905346][   T13] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[  277.929558][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.948623][   T13] usb 1-1: Product: syz
[  277.952830][   T13] usb 1-1: Manufacturer: syz
[  277.997495][   T13] usb 1-1: SerialNumber: syz
[  277.997770][T14997] netlink: 'syz.4.4898': attribute type 32 has an invalid length.
[  278.088823][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4899'.
[  278.236458][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4902'.
[  278.355894][   T13] ums-alauda 1-1:8.43: USB Mass Storage device detected
[  278.465417][   T13] hub 1-1:8.35: Invalid hub with more than one config or interface
[  278.485026][   T13] hub: probe of 1-1:8.35 failed with error -22
[  278.495897][   T13] ums-alauda 1-1:8.35: USB Mass Storage device detected
[  278.550322][T15024] overlayfs: failed to resolve 'obj_user=/­': -2
[  278.599742][   T13] usb 1-1: USB disconnect, device number 21
[  278.633872][T15027] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4910'.
[  278.674100][ T4263] Bluetooth: hci4: command 0x0406 tx timeout
[  278.739458][T14993] loop3: detected capacity change from 0 to 40427
[  278.741836][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4910'.
[  278.786305][T15027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4910'.
[  278.804650][T14993] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  278.822820][T14993] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  278.892875][T14993] F2FS-fs (loop3): invalid crc value
[  278.963402][T15041] loop1: detected capacity change from 0 to 512
[  278.982825][T14993] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  279.069614][T15037] loop4: detected capacity change from 0 to 4096
[  279.121362][T15037] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  279.153153][T15041] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  279.178129][T14993] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  279.197737][T14993] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  279.205880][T15041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  279.244818][T15041] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 1: comm syz.1.4917: invalid block
[  279.260800][T14993] fscrypt (loop3, inode 3): Error -61 getting encryption context
[  279.351958][T15041] EXT4-fs (loop1): Remounting filesystem read-only
[  279.408862][T15041] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.4917: couldn't read orphan inode 11 (err -117)
[  279.445018][T15041] EXT4-fs (loop1): Remounting filesystem read-only
[  279.451599][T15041] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000010001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,. Quota mode: none.
[  279.677298][T15071] loop0: detected capacity change from 0 to 256
[  279.917216][T15079] loop4: detected capacity change from 0 to 512
[  279.992257][T15079] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: comm syz.4.4935: inode #1792: comm syz.4.4935: iget: illegal inode #
[  280.054076][T15079] EXT4-fs (loop4): Remounting filesystem read-only
[  280.109460][T15079] EXT4-fs (loop4): no journal found
[  280.114749][T15079] EXT4-fs (loop4): can't get journal size
[  280.205745][T15079] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  280.297049][T15079] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  280.304707][T15079] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,resuid=0x0000000000000000,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback.
[  280.326829][T15104] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  280.404670][T15079] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.4935: Logical block already allocated
[  280.444534][T15079] EXT4-fs (loop4): Remounting filesystem read-only
[  280.579299][T15126] overlayfs: failed to resolve 'obj_user=/­': -2
[  281.217938][T15181] loop2: detected capacity change from 0 to 256
[  281.594274][T15212] program syz.4.4996 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  281.768029][T15228] __nla_validate_parse: 6 callbacks suppressed
[  281.768044][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5005'.
[  281.891272][T15240] netlink: 'syz.4.5011': attribute type 20 has an invalid length.
[  282.126097][T15262] loop2: detected capacity change from 0 to 512
[  282.169178][T15262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  282.218717][T15256] loop1: detected capacity change from 0 to 4096
[  282.228843][T15262] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 1: comm syz.2.5022: invalid block
[  282.270314][T15256] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  282.346949][T15262] EXT4-fs (loop2): Remounting filesystem read-only
[  282.353622][T15262] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.5022: couldn't read orphan inode 11 (err -117)
[  282.455987][T15262] EXT4-fs (loop2): Remounting filesystem read-only
[  282.462583][T15262] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000010001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,. Quota mode: none.
[  282.485721][    C1] vkms_vblank_simulate: vblank timer overrun
[  282.751800][   T26] audit: type=1326 audit(1786622569.151:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.5033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ed5a0d9 code=0x0
[  282.875034][ T5377] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  282.955243][T15298] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  283.115038][ T5377] usb 2-1: Using ep0 maxpacket: 16
[  283.235340][ T5377] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  283.268700][ T5377] usb 2-1: config 0 has no interface number 0
[  283.310944][ T5377] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  283.351694][ T5377] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  283.463307][T15334] loop2: detected capacity change from 0 to 512
[  283.486964][T15334] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: comm syz.2.5055: inode #1792: comm syz.2.5055: iget: illegal inode #
[  283.545217][ T5377] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  283.564521][ T5377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.580476][ T5377] usb 2-1: Product: syz
[  283.584282][T15330] loop0: detected capacity change from 0 to 4096
[  283.584721][ T5377] usb 2-1: Manufacturer: syz
[  283.602103][T15334] EXT4-fs (loop2): Remounting filesystem read-only
[  283.608805][T15334] EXT4-fs (loop2): no journal found
[  283.615041][   T13] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  283.629085][T15334] EXT4-fs (loop2): can't get journal size
[  283.641118][T15334] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  283.649426][ T5377] usb 2-1: SerialNumber: syz
[  283.658222][T15334] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  283.663915][ T5377] usb 2-1: config 0 descriptor??
[  283.673026][T15330] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  283.675614][T15334] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,resuid=0x0000000000000000,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback.
[  283.735339][T15285] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  283.742534][T15285] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  283.790285][T15334] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.5055: Logical block already allocated
[  283.818434][T15334] EXT4-fs (loop2): Remounting filesystem read-only
[  283.988297][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5061'.
[  284.005500][T15285] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  284.022911][T15285] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  284.045181][   T13] usb 4-1: config 7 descriptor has 1 excess byte, ignoring
[  284.052427][   T13] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2
[  284.214599][T15361] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5068'.
[  284.223169][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5069'.
[  284.243849][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5068'.
[  284.253343][T15361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5068'.
[  284.262668][   T13] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  284.272456][T15361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5068'.
[  284.281779][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.292935][   T13] usb 4-1: Product: syz
[  284.297352][   T13] usb 4-1: Manufacturer: syz
[  284.302091][   T13] usb 4-1: SerialNumber: syz
[  284.305607][ T5377] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  284.328492][ T5377] asix: probe of 2-1:0.34 failed with error -71
[  284.355199][T15364] netlink: 'syz.4.5071': attribute type 1 has an invalid length.
[  284.381536][ T5377] usb 2-1: USB disconnect, device number 27
[  284.387776][   T13] rndis_wlan 4-1:7.0: skipping garbage
[  284.391839][T15364] netlink: 'syz.4.5071': attribute type 9 has an invalid length.
[  284.400983][   T13] usb 4-1: bad CDC descriptors
[  284.416373][   T13] rndis_host 4-1:7.0: skipping garbage
[  284.435257][   T13] usb 4-1: bad CDC descriptors
[  284.455253][   T13] option 4-1:7.0: GSM modem (1-port) converter detected
[  284.499860][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5075'.
[  284.591399][ T4234] usb 4-1: USB disconnect, device number 27
[  284.604597][ T4234] option 4-1:7.0: device disconnected
[  284.619109][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5077'.
[  284.857326][T15398] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5086'.
[  284.885770][T15398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.220847][   T26] audit: type=1400 audit(1786622571.621:30): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15422 comm="syz.3.5099"
[  285.443032][T15443] loop4: detected capacity change from 0 to 136
[  285.499984][T15443] Attempt to read inode for relocated directory
[  285.514265][T15443] attempt to access beyond end of device
[  285.514265][T15443] loop4: rw=524288, want=335544432, limit=136
[  285.548754][T15443] attempt to access beyond end of device
[  285.548754][T15443] loop4: rw=0, want=335544432, limit=136
[  285.570480][   T26] audit: type=1800 audit(1786622571.971:31): pid=15443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5107" name="file1" dev="loop4" ino=1487 res=0 errno=0
[  285.842367][ T4234] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  285.852462][T15468] netlink: 'syz.4.5121': attribute type 9 has an invalid length.
[  286.126924][T15488] xt_cgroup: xt_cgroup: no path or classid specified
[  286.169075][T15492] device bridge_slave_1 left promiscuous mode
[  286.199492][T15492] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.235680][T15492] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  286.255356][ T4263] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  286.357268][T15502] netlink: 'syz.4.5136': attribute type 2 has an invalid length.
[  286.435344][ T4234] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  286.449104][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.467834][ T4234] usb 4-1: Product: syz
[  286.477982][ T4234] usb 4-1: Manufacturer: syz
[  286.487525][ T4234] usb 4-1: SerialNumber: syz
[  286.495309][   T13] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  286.517616][ T4234] usb 4-1: config 0 descriptor??
[  286.556412][ T4234] ch341 4-1:0.0: ch341-uart converter detected
[  286.665234][ T4263] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  286.680959][ T4263] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3
[  286.743280][   T26] audit: type=1400 audit(1786622573.141:32): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15525 comm="syz.4.5150"
[  286.766396][ T4234] usb 4-1: failed to receive control message: -71
[  286.772999][ T4234] ch341-uart: probe of ttyUSB0 failed with error -71
[  286.791782][ T4234] usb 4-1: USB disconnect, device number 28
[  286.800189][   T13] usb 3-1: Using ep0 maxpacket: 32
[  286.809132][ T4234] ch341 4-1:0.0: device disconnected
[  286.885276][ T4263] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95
[  286.902357][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.920697][ T4263] usb 1-1: Product: syz
[  286.924908][ T4263] usb 1-1: Manufacturer: syz
[  286.929818][ T4263] usb 1-1: SerialNumber: syz
[  286.935325][   T13] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  286.943513][   T13] usb 3-1: config 0 has no interface number 0
[  286.968913][   T13] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  287.111769][T15530] loop1: detected capacity change from 0 to 40427
[  287.162121][T15530] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  287.173384][T15530] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  287.185714][   T13] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  287.195829][T15530] F2FS-fs (loop1): invalid crc value
[  287.201385][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.209739][   T13] usb 3-1: Product: syz
[  287.214201][   T13] usb 3-1: Manufacturer: syz
[  287.219100][   T13] usb 3-1: SerialNumber: syz
[  287.234720][   T13] usb 3-1: config 0 descriptor??
[  287.241520][T15530] F2FS-fs (loop1): Found nat_bits in checkpoint
[  287.268270][T15494] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  287.325643][ T4263] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  287.332580][ T4263] dvb_usb_af9015: probe of 1-1:2.0 failed with error -22
[  287.357752][T15530] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  287.375092][T15530] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  287.405172][ T4263] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  287.411588][ T4263] dvb_usb_af9035: probe of 1-1:2.0 failed with error -22
[  287.450362][ T4263] usb 1-1: USB disconnect, device number 22
[  287.508702][T15546] __nla_validate_parse: 2 callbacks suppressed
[  287.508716][T15546] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5157'.
[  287.586628][   T13] asix: probe of 3-1:0.188 failed with error -71
[  287.604159][T15548] netlink: 'syz.3.5169': attribute type 3 has an invalid length.
[  287.625333][   T13] usb 3-1: USB disconnect, device number 15
[  287.766173][T15557] 8021q: adding VLAN 0 to HW filter on device bond2
[  287.810079][T15561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5165'.
[  287.972036][T15569] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5170'.
[  288.617827][T15607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5187'.
[  288.849533][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5196'.
[  288.888910][T15576] loop0: detected capacity change from 0 to 40427
[  288.896323][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5196'.
[  288.950686][T15626] netlink: 'syz.3.5197': attribute type 13 has an invalid length.
[  288.969263][T15576] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  288.989489][T15576] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  289.039956][T15576] F2FS-fs (loop0): invalid crc value
[  289.047844][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5200'.
[  289.103833][T15576] F2FS-fs (loop0): Found nat_bits in checkpoint
[  289.272993][T15576] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  289.297065][T15576] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  289.517270][T15653] loop4: detected capacity change from 0 to 764
[  289.713001][T15621] loop1: detected capacity change from 0 to 40427
[  289.778796][T15621] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  289.795735][T15621] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  289.833481][T15665] 8021q: adding VLAN 0 to HW filter on device bond3
[  289.844698][T15621] F2FS-fs (loop1): invalid crc value
[  289.901483][T15621] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  290.107342][T15682] netlink: 'syz.3.5221': attribute type 1 has an invalid length.
[  290.137474][T15682] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5221'.
[  290.222447][T15621] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  290.257036][T15621] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  290.362630][T15621] fscrypt (loop1, inode 3): Error -61 getting encryption context
[  290.420835][T15697] overlayfs: conflicting options: nfs_export=on,index=off
[  290.458133][T15703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5238'.
[  290.740727][T15719] bond0: option use_carrier: invalid value (9)
[  290.875110][   T13] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  291.254334][T15757] netlink: 'syz.1.5267': attribute type 13 has an invalid length.
[  291.268225][T15753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5257'.
[  291.277841][   T13] usb 1-1: config 7 descriptor has 1 excess byte, ignoring
[  291.305047][   T13] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2
[  291.515333][   T13] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  291.524433][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.535765][   T13] usb 1-1: Product: syz
[  291.539971][   T13] usb 1-1: Manufacturer: syz
[  291.554977][   T13] usb 1-1: SerialNumber: syz
[  291.628164][   T13] rndis_wlan 1-1:7.0: skipping garbage
[  291.633761][   T13] usb 1-1: bad CDC descriptors
[  291.649804][   T13] rndis_host 1-1:7.0: skipping garbage
[  291.671130][   T13] usb 1-1: bad CDC descriptors
[  291.680121][T15788] loop4: detected capacity change from 0 to 256
[  291.700673][   T13] option 1-1:7.0: GSM modem (1-port) converter detected
[  291.752641][T15792] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  291.832306][ T5383] usb 1-1: USB disconnect, device number 23
[  291.859701][ T5383] option 1-1:7.0: device disconnected
[  291.922303][T15788] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  292.019386][T15808] netlink: 'syz.1.5282': attribute type 25 has an invalid length.
[  292.030470][T15808] netlink: 'syz.1.5282': attribute type 6 has an invalid length.
[  292.051886][T15810] ieee802154 phy0 wpan0: encryption failed: -22
[  292.288609][T15820] loop1: detected capacity change from 0 to 764
[  292.341706][T15823] netlink: 'syz.4.5284': attribute type 8 has an invalid length.
[  292.941144][T15852] __nla_validate_parse: 2 callbacks suppressed
[  292.941160][T15852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5303'.
[  293.236000][T15876] overlayfs: conflicting options: nfs_export=on,index=off
[  293.318641][T15880] loop2: detected capacity change from 0 to 2048
[  293.352701][T15880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  293.392459][T15880] Invalid option length (0) for dns_resolver key
[  293.548218][ T5377] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  293.643001][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  293.926438][ T5377] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.942904][ T5377] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  294.078866][T15923] netlink: 'syz.2.5350': attribute type 9 has an invalid length.
[  294.160878][ T5377] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  294.185381][ T5377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.207715][ T5377] usb 1-1: Product: syz
[  294.211924][ T5377] usb 1-1: Manufacturer: syz
[  294.231745][ T5377] usb 1-1: SerialNumber: syz
[  294.244264][T15935] xt_hashlimit: max too large, truncated to 1048576
[  294.256304][T15935] xt_hashlimit: overflow, try lower: 137438953472/8
[  294.308432][ T5377] cdc_ncm 1-1:1.0: skipping garbage
[  294.324367][ T5377] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  294.370440][ T5377] cdc_ncm 1-1:1.0: bind() failure
[  294.430442][ T5377] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  294.445448][ T5377] cdc_ncm 1-1:1.1: bind() failure
[  294.531909][ T5377] usb 1-1: USB disconnect, device number 24
[  294.552685][T15950] loop2: detected capacity change from 0 to 512
[  294.591984][T15953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5365'.
[  294.658720][T15950] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  294.694487][T15950] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  294.714726][T15950] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  294.726118][T15950] EXT4-fs (loop2): orphan cleanup on readonly fs
[  294.732584][T15950] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  294.803985][T15950] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  294.927083][T15950] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  294.936388][T15950] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5353: bg 0: block 40: padding at end of block bitmap is not set
[  294.970969][T15950] EXT4-fs (loop2): Remounting filesystem read-only
[  294.993549][T15950] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  295.006176][T15950] EXT4-fs (loop2): Remounting filesystem read-only
[  295.012897][T15950] EXT4-fs (loop2): 1 truncate cleaned up
[  295.023279][T15950] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback.
[  295.089317][T15950] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  295.536323][T16007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5381'.
[  295.558666][T16005] loop1: detected capacity change from 0 to 512
[  295.659912][T16005] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  295.724067][T16005] ext4 filesystem being mounted at /1029/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  295.740572][T16018] loop3: detected capacity change from 0 to 512
[  295.757898][T16014] bond0: (slave bond_slave_1): Releasing backup interface
[  295.788408][T16018] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  295.815748][T16018] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  295.825978][T16018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  295.886651][T16018] EXT4-fs (loop3): orphan cleanup on readonly fs
[  295.893097][T16018] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  295.913022][T16018] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  295.927763][T16018] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  295.934880][T16018] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5383: bg 0: block 40: padding at end of block bitmap is not set
[  295.960856][T16018] EXT4-fs (loop3): Remounting filesystem read-only
[  295.995670][T16018] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  296.020092][T16018] EXT4-fs (loop3): Remounting filesystem read-only
[  296.052767][T16018] EXT4-fs (loop3): 1 truncate cleaned up
[  296.052790][T16018] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback.
[  296.077288][T15989] loop0: detected capacity change from 0 to 32768
[  296.085553][T16018] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  296.096883][T16027] loop4: detected capacity change from 0 to 64
[  296.111856][T16029] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  296.187876][T15989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.5373 (15989)
[  296.214528][T15989] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  296.214600][T15989] BTRFS info (device loop0): using free space tree
[  296.214617][T15989] BTRFS info (device loop0): has skinny extents
[  296.442546][T16052] loop1: detected capacity change from 0 to 512
[  296.496175][T15989] BTRFS info (device loop0): enabling ssd optimizations
[  296.502545][T16052] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  296.502564][T16052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102]
[  296.503467][T16052] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80)
[  296.503486][T16052] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features
[  296.503502][T16052] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,bsdgroups,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  296.555186][T16052] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.5396: dx entry: limit 65535 != root limit 120
[  296.831981][T16052] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.5396: Corrupt directory, running e2fsck is recommended
[  296.833857][T12617] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (12617)
[  297.754947][T16094] loop3: detected capacity change from 0 to 32768
[  298.101139][T16136] bond0: (slave bond_slave_1): Releasing backup interface
[  298.164153][T16094] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  298.220918][T16094] BTRFS info (device loop3): using free space tree
[  298.244232][T16094] BTRFS info (device loop3): has skinny extents
[  298.565150][ T5381] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  298.584744][T16094] BTRFS info (device loop3): enabling ssd optimizations
[  298.809218][ T5381] usb 1-1: Using ep0 maxpacket: 16
[  298.925326][ T5381] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  298.941830][ T5381] usb 1-1: config 0 has no interface number 0
[  298.988862][ T5381] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  299.025072][ T5381] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  299.225050][ T5377] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  299.235168][ T5381] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  299.250600][ T5381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.277580][ T5381] usb 1-1: Product: syz
[  299.295047][ T5381] usb 1-1: Manufacturer: syz
[  299.299964][ T5381] usb 1-1: SerialNumber: syz
[  299.333979][ T5381] usb 1-1: config 0 descriptor??
[  299.355751][T16148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  299.363334][T16148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  299.610191][T16148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  299.645599][T16148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  299.688734][T16213] loop4: detected capacity change from 0 to 32768
[  299.717578][T16213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5455 (16213)
[  299.765090][ T5377] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  299.781765][T16213] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  299.791152][ T5377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.811999][T16213] BTRFS info (device loop4): using free space tree
[  299.818860][ T5377] usb 3-1: Product: syz
[  299.823116][ T5377] usb 3-1: Manufacturer: syz
[  299.833229][T16213] BTRFS info (device loop4): has skinny extents
[  299.839610][ T5377] usb 3-1: SerialNumber: syz
[  299.863062][ T5377] usb 3-1: config 0 descriptor??
[  299.895206][ T5381] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  299.906866][ T5377] ch341 3-1:0.0: ch341-uart converter detected
[  299.946026][ T5381] asix: probe of 1-1:0.34 failed with error -71
[  299.988017][ T5381] usb 1-1: USB disconnect, device number 25
[  300.041139][T16213] BTRFS info (device loop4): enabling ssd optimizations
[  300.125406][ T5377] usb 3-1: short control message received (0 < 2)
[  300.131891][ T5377] usb 3-1: failed to receive control message: -5
[  300.150626][ T5377] ch341-uart: probe of ttyUSB0 failed with error -5
[  300.303325][T12617] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (12617)
[  300.342701][ T5381] usb 3-1: USB disconnect, device number 16
[  300.353486][ T5381] ch341 3-1:0.0: device disconnected
[  300.449971][T16264] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  300.742590][T16284] netlink: 'syz.3.5479': attribute type 10 has an invalid length.
[  300.765049][T16284] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5479'.
[  300.826235][T16284] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  300.966281][T16297] 8021q: adding VLAN 0 to HW filter on device bond2
[  301.156466][T16313] netlink: 'syz.3.5491': attribute type 1 has an invalid length.
[  301.164351][T16313] netlink: 'syz.3.5491': attribute type 9 has an invalid length.
[  301.190766][T16199] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  301.227953][ T5381] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  301.493079][T16340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5506'.
[  301.606441][ T5381] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.628344][ T5381] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  301.635094][T16199] usb 1-1: unable to get BOS descriptor or descriptor too short
[  301.786460][T16199] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.802845][T16199] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  301.825287][ T5381] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  301.861430][ T5381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.885436][ T5381] usb 3-1: Product: syz
[  301.889826][ T5381] usb 3-1: Manufacturer: syz
[  301.894425][ T5381] usb 3-1: SerialNumber: syz
[  301.976122][ T5381] cdc_ncm 3-1:1.0: skipping garbage
[  301.981460][ T5381] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[  301.999423][ T5381] cdc_ncm 3-1:1.0: bind() failure
[  302.015332][T16199] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  302.024428][T16199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.053818][T16199] usb 1-1: Product: syz
[  302.071827][ T5381] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  302.080591][T16199] usb 1-1: Manufacturer: syz
[  302.089005][ T5381] cdc_ncm 3-1:1.1: bind() failure
[  302.097206][T16199] usb 1-1: SerialNumber: syz
[  302.168963][T16199] usb 1-1: selecting invalid altsetting 1
[  302.175491][T16199] usb 1-1: unit 6 not found!
[  302.232038][ T5381] usb 3-1: USB disconnect, device number 17
[  302.249205][T16388] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  302.260992][T16388] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  302.463189][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5537'.
[  302.472526][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5537'.
[  302.595245][T16199] usb 1-1: cannot get ctl value: req = 0x82, wValue = 0x100, wIndex = 0x200, type = 3
[  302.604867][T16199] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2)
[  302.625181][T16199] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3
[  302.642565][T16199] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  302.651410][T16199] usb 1-1: USB disconnect, device number 26
[  302.655782][ T5374] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  302.845061][T16194] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  302.865698][T12617] udevd[12617]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.040983][ T5374] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.074981][ T5374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  303.094872][ T5374] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  303.231851][T16194] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  303.250348][T16194] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.260885][T16194] usb 4-1: config 1 interface 0 has no altsetting 0
[  303.298154][T16432] loop4: detected capacity change from 0 to 256
[  303.305481][ T5374] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  303.320587][ T5374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.329099][ T5374] usb 2-1: Product: syz
[  303.333355][ T5374] usb 2-1: Manufacturer: syz
[  303.341319][ T5374] usb 2-1: SerialNumber: syz
[  303.348474][ T5374] usb 2-1: config 0 descriptor??
[  303.378426][T16432] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  303.400235][ T5374] mcba_usb 2-1:0.0: Can't find endpoints
[  303.400773][T16432] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  303.422491][T16432] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  303.436104][T16194] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40
[  303.456242][T16194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.475258][T16194] usb 4-1: Product: syz
[  303.484544][T16194] usb 4-1: Manufacturer: syz
[  303.493912][T16194] usb 4-1: SerialNumber: syz
[  303.548370][ T1106] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  303.602044][ T5374] usb 2-1: USB disconnect, device number 28
[  303.831480][T16194] vmk80xx 4-1:1.0: driver 'vmk80xx' failed to auto-configure device.
[  303.849873][T16194] usb 4-1: USB disconnect, device number 29
[  303.950176][ T1106] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  303.959016][ T1106] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  303.974328][ T1106] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.984846][ T1106] usb 3-1: config 0 has no interface number 0
[  303.996406][ T1106] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  304.008969][ T1106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.021147][ T1106] usb 3-1: config 0 descriptor??
[  304.139947][T16457] loop4: detected capacity change from 0 to 32768
[  304.226357][T16457] JBD2: Ignoring recovery information on journal
[  304.321965][T16194] usb 3-1: USB disconnect, device number 18
[  304.333913][T16457] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  304.378724][T16457] (syz.4.5564,16457,1):ocfs2_find_entry:1075 ERROR: status = -117
[  304.408123][T16457] (syz.4.5564,16457,1):ocfs2_find_entry:1075 ERROR: status = -117
[  304.421220][T16457] (syz.4.5564,16457,1):ocfs2_symlink:2065 ERROR: status = -117
[  304.429518][T16468] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  304.492492][T16468] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  304.518055][ T4195] ocfs2: Unmounting device (7,4) on (node local)
[  304.523390][T16475] ieee802154 phy0 wpan0: encryption failed: -22
[  304.545056][T16468] overlayfs: missing 'lowerdir'
[  304.698425][T16483] netlink: 'syz.1.5576': attribute type 3 has an invalid length.
[  304.857672][T16491] loop4: detected capacity change from 0 to 256
[  304.911708][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5583'.
[  305.073923][T16509] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.5589'.
[  305.117984][T16511] netlink: 'syz.3.5590': attribute type 2 has an invalid length.
[  305.131829][T16509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.165647][T16511] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5590'.
[  305.310318][T16526] loop1: detected capacity change from 0 to 1024
[  305.555550][T16543] tmpfs: Bad value for 'mpol'
[  305.732743][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5612'.
[  306.239233][T16583] netlink: 'syz.0.5626': attribute type 3 has an invalid length.
[  306.617227][T16548] loop3: detected capacity change from 0 to 32768
[  306.707542][T16609] netlink: 'syz.1.5638': attribute type 5 has an invalid length.
[  306.795533][T16616] 
[  306.797912][T16616] ======================================================
[  306.804948][T16616] WARNING: possible circular locking dependency detected
[  306.811992][T16616] syzkaller #0 Not tainted
[  306.816423][T16616] ------------------------------------------------------
[  306.823453][T16616] syz.0.5640/16616 is trying to acquire lock:
[  306.829539][T16616] ffff888079d89028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  306.840637][T16616] 
[  306.840637][T16616] but task is already holding lock:
[  306.848041][T16616] ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560
[  306.857740][T16616] 
[  306.857740][T16616] which lock already depends on the new lock.
[  306.857740][T16616] 
[  306.868159][T16616] 
[  306.868159][T16616] the existing dependency chain (in reverse order) is:
[  306.877191][T16616] 
[  306.877191][T16616] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  306.885218][T16616]        __mutex_lock_common+0x1e5/0x2400
[  306.890974][T16616]        mutex_lock_nested+0x17/0x20
[  306.896300][T16616]        rfkill_register+0x2f/0x970
[  306.901560][T16616]        hci_register_dev+0x459/0x980
[  306.906966][T16616]        vhci_create_device+0x32e/0x5c0
[  306.912538][T16616]        vhci_write+0x389/0x440
[  306.917416][T16616]        vfs_write+0x748/0xd70
[  306.922192][T16616]        ksys_write+0x153/0x260
[  306.927059][T16616]        do_syscall_64+0x4c/0xa0
[  306.932026][T16616]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  306.938504][T16616] 
[  306.938504][T16616] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  306.946358][T16616]        __mutex_lock_common+0x1e5/0x2400
[  306.952103][T16616]        mutex_lock_nested+0x17/0x20
[  306.957415][T16616]        vhci_send_frame+0x88/0x100
[  306.962642][T16616]        hci_send_frame+0x1a9/0x2e0
[  306.967865][T16616]        hci_tx_work+0x9b5/0x16d0
[  306.972912][T16616]        process_one_work+0x867/0xff0
[  306.978310][T16616]        worker_thread+0xad7/0x12a0
[  306.983569][T16616]        kthread+0x42e/0x520
[  306.988185][T16616]        ret_from_fork+0x1f/0x30
[  306.993159][T16616] 
[  306.993159][T16616] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  307.002393][T16616]        __flush_work+0x116/0x210
[  307.007429][T16616]        hci_dev_do_close+0x201/0x1020
[  307.012906][T16616]        hci_dev_close+0xd9/0x180
[  307.017950][T16616]        sock_do_ioctl+0xfb/0x320
[  307.023029][T16616]        sock_ioctl+0x48a/0x700
[  307.027902][T16616]        __se_sys_ioctl+0xfa/0x170
[  307.033030][T16616]        do_syscall_64+0x4c/0xa0
[  307.037984][T16616]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  307.044415][T16616] 
[  307.044415][T16616] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  307.052110][T16616]        __mutex_lock_common+0x1e5/0x2400
[  307.057848][T16616]        mutex_lock_nested+0x17/0x20
[  307.063149][T16616]        bg_scan_update+0x44/0x3b0
[  307.068272][T16616]        process_one_work+0x867/0xff0
[  307.073672][T16616]        worker_thread+0xad7/0x12a0
[  307.078886][T16616]        kthread+0x42e/0x520
[  307.083491][T16616]        ret_from_fork+0x1f/0x30
[  307.088443][T16616] 
[  307.088443][T16616] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  307.098274][T16616]        __lock_acquire+0x2c66/0x7b50
[  307.103670][T16616]        lock_acquire+0x19e/0x400
[  307.108716][T16616]        __flush_work+0x116/0x210
[  307.113750][T16616]        __cancel_work_timer+0x3f4/0x560
[  307.119392][T16616]        hci_request_cancel_all+0xcc/0x300
[  307.125220][T16616]        hci_dev_do_close+0x4e/0x1020
[  307.130639][T16616]        hci_rfkill_set_block+0x101/0x180
[  307.136381][T16616]        rfkill_set_block+0x1c1/0x3c0
[  307.141776][T16616]        rfkill_fop_write+0x453/0x560
[  307.147164][T16616]        vfs_write+0x304/0xd70
[  307.151947][T16616]        ksys_write+0x153/0x260
[  307.156819][T16616]        do_syscall_64+0x4c/0xa0
[  307.161775][T16616]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  307.168213][T16616] 
[  307.168213][T16616] other info that might help us debug this:
[  307.168213][T16616] 
[  307.178447][T16616] Chain exists of:
[  307.178447][T16616]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  307.178447][T16616] 
[  307.194185][T16616]  Possible unsafe locking scenario:
[  307.194185][T16616] 
[  307.201642][T16616]        CPU0                    CPU1
[  307.207010][T16616]        ----                    ----
[  307.212382][T16616]   lock(rfkill_global_mutex);
[  307.217157][T16616]                                lock(&data->open_mutex);
[  307.224280][T16616]                                lock(rfkill_global_mutex);
[  307.231576][T16616]   lock((work_completion)(&hdev->bg_scan_update));
[  307.238171][T16616] 
[  307.238171][T16616]  *** DEADLOCK ***
[  307.238171][T16616] 
[  307.246319][T16616] 1 lock held by syz.0.5640/16616:
[  307.251442][T16616]  #0: ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560
[  307.261572][T16616] 
[  307.261572][T16616] stack backtrace:
[  307.267465][T16616] CPU: 1 PID: 16616 Comm: syz.0.5640 Not tainted syzkaller #0
[  307.274938][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  307.285029][T16616] Call Trace:
[  307.288322][T16616]  <TASK>
[  307.291271][T16616]  dump_stack_lvl+0x188/0x250
[  307.295972][T16616]  ? load_image+0x410/0x410
[  307.300496][T16616]  ? show_regs_print_info+0x20/0x20
[  307.305735][T16616]  ? print_circular_bug+0x12b/0x1a0
[  307.310959][T16616]  check_noncircular+0x296/0x330
[  307.315912][T16616]  ? add_chain_block+0x9b0/0x9b0
[  307.320868][T16616]  ? lockdep_lock+0xf1/0x1f0
[  307.325482][T16616]  ? __lock_acquire+0x1305/0x7b50
[  307.330534][T16616]  ? mark_lock+0x94/0x320
[  307.334880][T16616]  ? _find_first_zero_bit+0xd1/0xf0
[  307.340108][T16616]  __lock_acquire+0x2c66/0x7b50
[  307.344991][T16616]  ? verify_lock_unused+0x140/0x140
[  307.350222][T16616]  ? verify_lock_unused+0x140/0x140
[  307.355461][T16616]  lock_acquire+0x19e/0x400
[  307.359994][T16616]  ? __flush_work+0xfa/0x210
[  307.364605][T16616]  ? __lock_acquire+0x7b50/0x7b50
[  307.369658][T16616]  ? read_lock_is_recursive+0x10/0x10
[  307.375052][T16616]  ? start_flush_work+0x784/0x830
[  307.380102][T16616]  ? __lock_acquire+0x13dc/0x7b50
[  307.385151][T16616]  __flush_work+0x116/0x210
[  307.389681][T16616]  ? __flush_work+0xfa/0x210
[  307.394286][T16616]  ? flush_work+0x20/0x20
[  307.398627][T16616]  ? try_to_grab_pending+0xfb/0x820
[  307.403852][T16616]  ? mark_lock+0x94/0x320
[  307.408194][T16616]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  307.414185][T16616]  ? lock_chain_count+0x20/0x20
[  307.419044][T16616]  ? mark_lock+0x94/0x320
[  307.423378][T16616]  ? __cancel_work_timer+0x36a/0x560
[  307.428672][T16616]  __cancel_work_timer+0x3f4/0x560
[  307.433790][T16616]  ? cancel_work_sync+0x20/0x20
[  307.438649][T16616]  ? __cancel_work+0x1f9/0x2e0
[  307.443419][T16616]  ? lockdep_hardirqs_on+0x94/0x140
[  307.448633][T16616]  ? __cancel_work+0x27b/0x2e0
[  307.453402][T16616]  ? cancel_work+0x20/0x20
[  307.457824][T16616]  hci_request_cancel_all+0xcc/0x300
[  307.463110][T16616]  hci_dev_do_close+0x4e/0x1020
[  307.467959][T16616]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  307.473877][T16616]  ? _raw_spin_unlock+0x40/0x40
[  307.478733][T16616]  hci_rfkill_set_block+0x101/0x180
[  307.483940][T16616]  ? rcu_lock_release+0x20/0x20
[  307.488797][T16616]  rfkill_set_block+0x1c1/0x3c0
[  307.493656][T16616]  rfkill_fop_write+0x453/0x560
[  307.498508][T16616]  ? rfkill_fop_read+0x560/0x560
[  307.503450][T16616]  ? common_file_perm+0x100/0x1c0
[  307.508473][T16616]  ? fsnotify_perm+0x5d/0x560
[  307.513153][T16616]  ? security_file_permission+0x75/0xa0
[  307.518708][T16616]  ? rfkill_fop_read+0x560/0x560
[  307.523649][T16616]  vfs_write+0x304/0xd70
[  307.527911][T16616]  ? file_end_write+0x250/0x250
[  307.532780][T16616]  ? __fget_files+0x402/0x470
[  307.537470][T16616]  ? __fdget_pos+0x1e2/0x370
[  307.542059][T16616]  ? ksys_write+0x70/0x260
[  307.546477][T16616]  ksys_write+0x153/0x260
[  307.550812][T16616]  ? __ia32_sys_read+0x80/0x80
[  307.555582][T16616]  ? lockdep_hardirqs_on+0x94/0x140
[  307.560790][T16616]  do_syscall_64+0x4c/0xa0
[  307.565214][T16616]  ? clear_bhb_loop+0x30/0x80
[  307.569902][T16616]  ? clear_bhb_loop+0x30/0x80
[  307.574581][T16616]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  307.580506][T16616] RIP: 0033:0x7fb82295a0d9
[  307.584937][T16616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.605064][T16616] RSP: 002b:00007fb820bb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  307.613488][T16616] RAX: ffffffffffffffda RBX: 00007fb822be1fa0 RCX: 00007fb82295a0d9
[  307.621460][T16616] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  307.629433][T16616] RBP: 00007fb8229f1024 R08: 0000000000000000 R09: 0000000000000000
[  307.637407][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.645514][T16616] R13: 00007fb822be2038 R14: 00007fb822be1fa0 R15: 00007ffce1595058
[  307.653497][T16616]  </TASK>
[  307.862029][T16613] loop4: detected capacity change from 0 to 32768
[  307.906959][T16613] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  307.921457][T16613] JBD2: Ignoring recovery information on journal
[  307.935012][T16622] loop3: detected capacity change from 0 to 40427
[  307.955362][T16613] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  307.977558][ T4195] ocfs2: Unmounting device (7,4) on (node local)
[  308.000492][T16622] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  308.019666][T16622] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  308.052059][T16622] F2FS-fs (loop3): invalid crc value
[  308.092232][T16622] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  308.129233][T16622] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  308.136329][T16622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5